CVE-2020-14732

Name of the Vulnerable Software and Affected Versions: Oracle Retail Customer Management and Segmentation Foundation version 19.0

Description: The issue is related to inadequate access control in the Promotions component, allowing a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data. The vulnerability is difficult to exploit.

Recommendations: For version 19.0, consider restricting access to the Promotions component to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit network access via HTTP to reduce the attack surface.