PT-2020-3593
CVE-2020-14561
·
Published
2020-07-15
·
Updated
2020-07-21
Description by
CVSS 3.1
7.3
HighMetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Oracle Hospitality Reporting and Analytics version 9.1.0
Description
The issue is related to insufficient input validation in the Installation component of Oracle Hospitality Reporting and Analytics, allowing a low-privileged attacker with logon access to the infrastructure to compromise the system. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of Oracle Hospitality Reporting and Analytics.
Recommendations
For version 9.1.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾