PT-2018-16048 · Oracle · Oracle Hospitality Cruise Shipboard Property Management System

Published 2018-10-17 · Updated 2019-10-03 · CVE-2018-3160

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Shipboard Property Management System version 8.0

Description The issue allows a high-privileged attacker with logon to the infrastructure to compromise the system. It requires human interaction from a person other than the attacker and can significantly impact additional products, potentially resulting in a takeover of the system.

Recommendations For version 8.0, update to a version that includes a fix for this issue, as the current version is easily exploitable and can lead to significant consequences.

Fix

Related Identifiers

CVE-2018-3160

Affected Products

Oracle Hospitality Cruise Shipboard Property Management System

References · 4

• https://osv.dev/vulnerability/CVE-2018-3160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3160 · Security Note
• http://oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html · Vendor Advisory
• http://securityfocus.com/bid/105632 · Note