Vulnerability in Oracle Hospitality Applications Guest Access Component
CVE-2017-10370

6.9MEDIUM

Key Information:

Vendor
Oracle
Status
Hospitality Guest Access
Vendor
CVE Published:
19 October 2017

Summary

The vulnerability in the Oracle Hospitality Guest Access component allows attackers with network access via HTTP to exploit the system. An attacker with elevated privileges can compromise the Oracle Hospitality Guest Access, resulting in unauthorized access to sensitive information. Successful exploitation requires some form of human interaction, making it easier for an attacker to manipulate unsuspecting users. This weakness may also affect other associated products, posing a broader risk to the overall system. Attackers may gain the capability to improperly update, insert, or delete data, leading to significant data integrity issues.

Affected Version(s)

Hospitality Guest Access 4.2.0

Hospitality Guest Access 4.2.1

References

http://www.oracle.com/technetwork/security-advisory/cpuoc...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/101430
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.