CVE-2018-3181: Medium severity oracle hospitality cruise shipboard property management system vulnerability

Published Oct 17, 2018

Updated

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC ENOAD). The supported version that is affected is 8.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise Shipboard Property Management System executes to compromise Oracle Hospitality Cruise Shipboard Property Management System. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise Shipboard Property Management System accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected Software

1 affected component

Oracle Hospitality Cruise Shipboard Property Management System=8.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Event History

Oct 17, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3181?

The severity of CVE-2018-3181 is medium.

What is the affected software component of CVE-2018-3181?

The affected software component of CVE-2018-3181 is Oracle Hospitality Cruise Shipboard Property Management System version 8.0.

How can a low privileged attacker exploit CVE-2018-3181?

A low privileged attacker can exploit CVE-2018-3181 if they have logon access to the infrastructure.

What is the reference for CVE-2018-3181?

The references for CVE-2018-3181 are: [Oracle Security Advisory](http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html), [SecurityFocus](http://www.securityfocus.com/bid/105632).