Authentication Bypass in Oracle Hospitality Reporting and Analytics

CVE-2018-2650

What is CVE-2018-2650?

A vulnerability exists in the Oracle Hospitality Reporting and Analytics component, which might allow a low-privileged attacker with network access via HTTP to compromise the system. This exploitable weakness can lead to unauthorized actions, including creation, deletion, or modification of critical data within the Oracle Hospitality Reporting and Analytics environment. Additionally, it may permit unauthorized read access to specific datasets, exposing sensitive information linked to the reporting and analytics capabilities.

References