PT-2019-3598 · Oracle · Oracle Hospitality Res 3700

CVE-2019-3025 · Publicado 2019-10-15 · Atualizado 2023-01-31

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Crítica

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Hospitality RES 3700 version 5.7

Description The issue is related to insufficient access controls in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. It allows a remote attacker to gain full control over the application using HTTP protocols. Successful exploitation can result in the takeover of Oracle Hospitality RES 3700 and may significantly impact additional products.

Recommendations For version 5.7, update to a version that includes a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the Oracle Hospitality RES 3700 component to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-03808

CVE-2019-3025

Produtos afetados

Oracle Hospitality Res 3700

Referências · 6

• 🔥 http://packetstormsecurity.com/files/157746/Oracle-Hospitality-RES-3700-5.7-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/48477 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-3025 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-03808 · Nota de Segurança
• http://oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3025 · Aviso do Fabricante