CVE-2020-2953

Name of the Vulnerable Software and Affected Versions Oracle Retail Customer Management and Segmentation Foundation version 18.0

Description The issue is related to inadequate access control in the Promotions component, allowing an unauthenticated attacker with network access via HTTP to compromise the Oracle Retail Customer Management and Segmentation Foundation. Successful attacks can result in the takeover of the application.

Recommendations For version 18.0, update to a version that addresses the access control issue in the Promotions component to prevent potential takeover of the application. As a temporary workaround, consider restricting access to the Promotions component until a patch is available.