Vulnerability in Oracle Hospitality Simphony Client Application Loader

CVE-2018-2802

What is CVE-2018-2802?

The vulnerability within the Oracle Hospitality Simphony component, specifically the Client Application Loader, allows attackers with low privileges and network access via HTTP to exploit the system. A successful exploitation can enable unauthorized updates, insertions, or deletions of data, as well as unauthorized read access to certain parts of the data within Oracle Hospitality Simphony. The affected versions include 2.8 and 2.9, making it crucial for users to assess and address this security concern promptly.

References