Vulnerability in Oracle Hospitality Guest Access Component

CVE-2017-10372

Summary

A vulnerability exists in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications, affecting versions 4.2.0 and 4.2.1. This flaw allows a high-privileged attacker with network access via HTTP to exploit the Guest Access service. The implications of this vulnerability are severe, as successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible through the Guest Access interface. Furthermore, attackers could induce frequent crashes or operational downtime, severely impacting the availability and functionality of Oracle Hospitality Guest Access and potentially other interconnected products.

References