Daniel Le Souef

**Name of the Vulnerable Software and Affected Versions** RWS WorldServer versions prior to 11.7.3 **Description** An issue was discovered in RWS WorldServer where adding a token parameter with the value of `02` bypasses all authentication requirements. This allows arbitrary Java code to be uploaded and executed via a `.jar` archive to the "ws-api/v2/customizations/api" endpoint. **Recommendations** For versions prior to 11.7.3, update to version 11.7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "ws-api/v2/customizations/api" endpoint until a patch is available. Avoid using the `token` parameter with the value of `02` in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Oracle Hospitality OPERA 5 version 5.5 **Description** The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. This can result in unauthorized update, insert, or delete access to some of Oracle Hospitality OPERA 5's accessible data, as well as unauthorized read access to a subset of Oracle Hospitality OPERA 5's accessible data. **Recommendations** For Oracle Hospitality OPERA 5 version 5.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle Hospitality OPERA 5 versions 5.5 and 5.6 **Description** The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5, resulting in unauthorized access to critical data or complete access to all accessible data. Successful attacks require human interaction from a person other than the attacker and can be easily exploited. **Recommendations** For versions 5.5 and 5.6, update to a version that includes a fix for this issue to prevent unauthorized access to critical data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle Hospitality Opera 5 version 5.5 **Description** The issue is related to inadequate access control in the Oracle Hospitality Opera 5 product, allowing a remote attacker to gain unauthorized access to protected information or modify, add, or delete data using the HTTP protocol. This can result in unauthorized access to critical data or complete access to all accessible data, as well as unauthorized update, insert, or delete access to some accessible data. **Recommendations** For Oracle Hospitality Opera 5 version 5.5, update the software to a version that addresses the inadequate access control issue. As a temporary workaround, consider restricting access to the login component to minimize the risk of exploitation. Avoid using the HTTP protocol for sensitive operations until the issue is resolved.