First published: Wed Jan 15 2020(Updated: )
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 accessible data. CVSS 3.0 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Hospitality OPERA Property Management | =5.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-2675 has been categorized as a high-severity vulnerability.
To fix CVE-2020-2675, you should apply the latest security patch provided by Oracle for OPERA 5.5.
CVE-2020-2675 affects users of Oracle Hospitality OPERA 5 version 5.5.
CVE-2020-2675 allows a low privileged attacker to remotely compromise the system via HTTP.
The Login component of Oracle Hospitality OPERA 5 is vulnerable in CVE-2020-2675.