PT-2017-11200
CVE-2017-10208
·
Published
2017-08-08
·
Updated
2019-10-03
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Oracle Hospitality e7 version 4.2.1
Description
The issue allows a low-privileged attacker with network access via SMTP to compromise Oracle Hospitality e7, resulting in unauthorized read access to a subset of Oracle Hospitality e7 accessible data.
Recommendations
For Oracle Hospitality e7 version 4.2.1, update to a version that addresses this issue, as the current version is affected and allows for unauthorized data access.
Found an issue in the description? Have something to add? Feel free to write us 👾