Unauthorized Access Vulnerability in Oracle Hospitality Simphony Applications
CVE-2018-2848
7.5HIGH
Key Information:
- Vendor
- Oracle
- Vendor
- CVE Published:
- 19 April 2018
Summary
An exploitable vulnerability exists in Oracle Hospitality Simphony First Edition's Client Application Loader, allowing unauthenticated attackers with network access via HTTP to gain unauthorized access to sensitive data. Successful exploitation may lead to complete access to all accessible data within the Oracle Hospitality Simphony environment, making it essential for organizations to apply necessary patches and mitigations.
Affected Version(s)
Hospitality Simphony First Edition 1.6
Hospitality Simphony First Edition 1.7
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved