CVE-2018-2956

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-2956
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration). The supported version that is affected is 5.5.x. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitality OPERA 5 Property Services executes to compromise Oracle Hospitality OPERA 5 Property Services. While the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality OPERA 5 Property Services. CVSS 3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability : 1.4 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

4.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 3.4 / Impact : 6.4

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch Vendor Advisory
http://www.securityfocus.com/bid/104818 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041300 Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html Patch Vendor Advisory
http://www.securityfocus.com/bid/104818 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1041300 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:oracle:hospitality_opera_property_management:5.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:hospitality_opera_property_management:5.5.1:*:*:*:*:*:*:*
History

21 Nov 2024, 04:04

Type Values Removed Values Added
References () http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - Patch, Vendor Advisory () http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/104818 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/104818 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1041300 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1041300 - Third Party Advisory, VDB Entry
Information

Published : 2018-07-18 13:29

Updated : 2024-11-21 04:04

NVD link : CVE-2018-2956

Mitre link : CVE-2018-2956

CVE.ORG link : CVE-2018-2956

JSON object : View

Products Affected

oracle

  • hospitality_opera_property_management
CWE
NVD-CWE-noinfo