Vulnerability in Oracle Hospitality Cruise Fleet Management Allows Unauthorized Access

CVE-2017-10226

Summary

An improper access control vulnerability exists in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications. This flaw can be exploited by a low-privileged attacker with network access to the service via HTTP. If successful, the attacker can gain unauthorized access to sensitive information, potentially leading to unauthorized alterations to data, including the ability to insert, update, or delete critical data within the system. Organizations using the affected version should take immediate steps to secure their systems against potential exploitation.

References