WebConnect Vulnerability in Oracle Hospitality Applications

CVE-2017-10050

Summary

A vulnerability exists in the Oracle Hospitality Suite8 component of Oracle's Hospitality Applications, specifically within the WebConnect subcomponent. This flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploiting this vulnerability requires human interaction from a user, potentially leading to unauthorized access to critical and sensitive data managed by the Hospitality Suite8. Successful exploitation may enable the attacker to gain complete control over accessible data, facilitating unauthorized updates, inserts, or deletions of data within the system. The implications of this vulnerability extend beyond the Hospitality Suite8, potentially affecting other related products.

References