PT-2017-11128

CVE-2017-10132

·

Published

2017-08-08

·

Updated

2019-10-03

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Applications version 1.05
Description The issue affects the Hospitality Hotel Mobile component, specifically the Suite8/iOS subcomponent. It allows a low-privileged attacker with network access via HTTP to compromise Hospitality Hotel Mobile. Successful attacks can result in unauthorized access to update, insert, or delete some accessible data.
Recommendations For version 1.05, update to a newer version that contains a fix for this issue.
Exploitability
Fix
Vendors
Affected products
Related identifiers
CVE-2017-10132
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com