PT-2020-1471 · Oracle · Oracle Hospitality Cruise Materials Management

Giuseppino Cadeddu · Published 2020-01-14 · Updated 2022-07-08 · CVE-2020-2599

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Oracle Hospitality Cruise Materials Management version 7.30.567

Description The issue is related to inadequate access control in the Oracle Hospitality Cruise Materials Management product, which can be exploited by a remote attacker to gain unauthorized access to sensitive information. Successful exploitation can result in unauthorized access to critical data or complete access to all accessible data in Oracle Hospitality Cruise Materials Management. The vulnerability is difficult to exploit and may require physical access to compromise the system.

Recommendations For version 7.30.567, consider restricting access to sensitive data and implementing additional security measures to prevent unauthorized access until a patch is available. As a temporary workaround, consider disabling or limiting access to components that may be affected by the inadequate access control issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2020-00454

CVE-2020-2599

Affected Products

Oracle Hospitality Cruise Materials Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-2599 · Security Note
• https://oracle.com/security-alerts/cpujan2020.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-2599 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00454 · Security Note
• https://oracle.com/security-alerts/public-vuln-to-advisory-mapping.html · Note