CVE-2017-10197: Infoleak

Published Oct 19, 2017

Updated

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios). The supported version that is affected is 5.4.2.x through 5.5.1.x. Easily exploitable vulnerability allows physical access to compromise Oracle Hospitality OPERA 5 Property Services. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data. CVSS 3.0 Base Score 4.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Affected Software

2 affected components

Oracle Hospitality OPERA 5 Property Services=5.4.2

Oracle Hospitality OPERA 5 Property Services=5.5.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html

Event History

Oct 19, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-10197?

CVE-2017-10197 has been rated as a critical vulnerability due to its exploitability with physical access.

How do I fix CVE-2017-10197?

To fix CVE-2017-10197, upgrade Oracle Hospitality OPERA 5 Property Services to versions 5.5.1 or higher.

What versions are affected by CVE-2017-10197?

CVE-2017-10197 affects versions 5.4.2.x through 5.5.1.x of the Oracle Hospitality OPERA 5 Property Services.

Can CVE-2017-10197 be exploited remotely?

No, CVE-2017-10197 requires physical access to the affected system for exploitation.

What component of Oracle Hospitality Applications is impacted by CVE-2017-10197?

CVE-2017-10197 impacts the Folios component of the Oracle Hospitality OPERA 5 Property Services.