PT-2020-1471

CVE-2020-2599

·

Published

2020-01-14

·

Updated

2022-07-08

Description by

CVSS 3.1
4.2
Medium
MetricsAV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Materials Management version 7.30.567
Description The issue is related to inadequate access control in the Oracle Hospitality Cruise Materials Management product, which can be exploited by a remote attacker to gain unauthorized access to sensitive information. Successful exploitation can result in unauthorized access to critical data or complete access to all accessible data in Oracle Hospitality Cruise Materials Management. The vulnerability is difficult to exploit and may require physical access to compromise the system.
Recommendations For version 7.30.567, consider restricting access to sensitive data and implementing additional security measures to prevent unauthorized access until a patch is available. As a temporary workaround, consider disabling or limiting access to components that may be affected by the inadequate access control issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾