First published: Thu Jan 18 2018(Updated: )
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Guest Access. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hospitality Guest Access | =4.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this vulnerability is CVE-2018-2607.
The affected software is Oracle Hospitality Guest Access version 4.2.1.
The severity of CVE-2018-2607 is medium with a severity value of 4.9.
A high privileged attacker with network access via HTTP can easily exploit CVE-2018-2607 to compromise Oracle Hospitality Guest Access.
You can find more information about CVE-2018-2607 at the following references: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html) and [SecurityFocus](http://www.securityfocus.com/bid/102580).