Unauthorized Access Vulnerability in Oracle Hospitality Applications

CVE-2017-10397

Summary

A vulnerability exists in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications, allowing unauthenticated attackers with network access via HTTP to gain unauthorized access to sensitive data. Exploitation of this flaw necessitates human interaction from a victim, enabling attacks that may facilitate unauthorized data updates, insertions, or deletions. Additionally, attackers can access a subset of data without proper authorization, thereby endangering data confidentiality and integrity.

References