Unauthorized Data Access in Oracle Hyperion Infrastructure Technology

CVE-2020-14854

What is CVE-2020-14854?

A serious access control vulnerability exists in Oracle's Hyperion Infrastructure Technology, specifically within the UI and Visualization component. This flaw enables a high-privileged attacker with network access via HTTP to potentially compromise the application. Successful exploitation requires some degree of human interaction from a user other than the attacker. If exploited, it could allow for unauthorized creation, deletion, or modification of critical data, potentially granting complete access to all data within the Hyperion Infrastructure Technology environment.

References