Unauthorized Data Access Vulnerability in Oracle Hospitality Suite8

CVE-2017-10317

Summary

A vulnerability exists in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications, specifically within the WebConnect subcomponent. This flaw allows an unauthenticated attacker with access to the infrastructure where Oracle Hospitality Suite8 is executed to potentially compromise the application. If successfully exploited, the attacker can gain unauthorized read access to a subset of data accessible to the Oracle Hospitality Suite8, posing a significant risk to sensitive information. Users of versions 8.10.1 and 8.10.2 are particularly vulnerable to this issue.

References