Access and Security Vulnerability in Oracle Hyperion Data Relationship Management

CVE-2019-2927

What is CVE-2019-2927?

A vulnerability exists in the Hyperion Data Relationship Management product, specifically within its Access and Security component. This issue enables a high-privileged attacker, with network access via HTTP, to compromise the integrity of the Hyperion Data Relationship Management software. To successfully exploit this vulnerability, it requires human interaction from an individual who is not the attacker, facilitating the potential for unauthorized control over the management system. This can lead to severe implications for the confidentiality, integrity, and availability of the data managed by the application.

References