Remote Authentication Vulnerability in Oracle Hospitality OPERA 5
CVE-2016-5565

7.7HIGH

Key Information:

Vendor
Oracle
Status
Hospitality Opera 5 Property Services
Vendor
CVE Published:
25 October 2016

Summary

An unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component allows remote authenticated users to impact confidentiality without sufficient control. This issue may be exploited through specially crafted requests, exposing sensitive information within Oracle Hospitality Applications across multiple versions, including 5.4.0.0 through 5.4.3.0 and 5.5.0.0 to 5.5.1.0. Users of these versions are advised to review security advisories for mitigation steps.

References

http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/93766
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.