Vulnerability in Oracle Hospitality Cruise Fleet Management Allows Unauthorized Access
CVE-2017-10226

7.1HIGH

Key Information:

Vendor

Oracle
Status
Hospitality Cruise Fleet Management
Vendor
CVE Published:
8 August 2017

What is CVE-2017-10226?

An improper access control vulnerability exists in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications. This flaw can be exploited by a low-privileged attacker with network access to the service via HTTP. If successful, the attacker can gain unauthorized access to sensitive information, potentially leading to unauthorized alterations to data, including the ability to insert, update, or delete critical data within the system. Organizations using the affected version should take immediate steps to secure their systems against potential exploitation.

Affected Version(s)

Hospitality Cruise Fleet Management 9.0

References

http://www.securitytracker.com/id/1038941
vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/security-advisory/cpuju...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/99646
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-10226 : Vulnerability in Oracle Hospitality Cruise Fleet Management Allows Unauthorized Access