Skip to content
OpenAdvisories
Medium DSA-2444-1 1 CVE

tryton-server - privilege escalation

Published Mar 29, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 tryton-server 1.6.1-2+squeeze1

Vulnerabilities 1

  • Medium 6.5
    CVE-2012-0215

    Trytond allows modification of privileges of arbitrary users

    model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via…

    trytond tryton-server Debian PyPI