Vulnerability in Oracle Hospitality OPERA 5 Component
CVE-2017-3568

6.5MEDIUM

Key Information:

Vendor
Oracle
Vendor
CVE Published:
24 April 2017

Summary

The vulnerability impacts the Oracle Hospitality OPERA 5 Property Services, allowing an unauthenticated attacker with logon credentials in the infrastructure to compromise the service. Successful exploitation can result in unauthorized access, creation, deletion, or modification of critical data, alongside a risk of causing a partial denial of service. The vulnerability requires human interaction from a separate user to facilitate the attack and affects various versions of the product.

Affected Version(s)

Hospitality OPERA 5 Property Services 5.4.0.x

Hospitality OPERA 5 Property Services 5.4.1.x

Hospitality OPERA 5 Property Services 5.4.2.x

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.