PT-2018-16048 · Oracle · Oracle Hospitality Cruise Shipboard Property Management System

Publicado 2018-10-17 · Atualizado 2019-10-03 · CVE-2018-3160

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0

Description The issue allows a high-privileged attacker with logon to the infrastructure to compromise the system. It requires human interaction from a person other than the attacker and can significantly impact additional products, potentially resulting in a takeover of the system.

Recommendations For version 8.0, update to a version that includes a fix for this issue, as the current version is easily exploitable and can lead to significant consequences.

Correção

Identificadores relacionados

CVE-2018-3160

Produtos afetados

Oracle Hospitality Cruise Shipboard Property Management System

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-3160 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-3160 · Nota de Segurança
• http://oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · Aviso do Fabricante
• http://securityfocus.com/bid/105632 · Nota