CVE-2018-2607: Medium severity oracle hospitality guest access vulnerability
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Guest Access. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hospitality Guest Access. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-2607.
What is the affected software?
The affected software is Oracle Hospitality Guest Access version 4.2.1.
What is the severity of CVE-2018-2607?
The severity of CVE-2018-2607 is medium with a severity value of 4.9.
How can a high privileged attacker exploit CVE-2018-2607?
A high privileged attacker with network access via HTTP can easily exploit CVE-2018-2607 to compromise Oracle Hospitality Guest Access.
Where can I find more information about CVE-2018-2607?
You can find more information about CVE-2018-2607 at the following references: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html) and [SecurityFocus](http://www.securityfocus.com/bid/102580).