HTTP: Oracle Hospitality Opera pre-authentication Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Oracle Hospitality Opera. A successful attack can lead to arbitrary code execution.

Extended Description

Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI). The supported version that is affected is 5.6. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5 Property Services. While the vulnerability is in Oracle Hospitality OPERA 5 Property Services, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality OPERA 5 Property Services accessible data as well as unauthorized update, insert or delete access to some of Oracle Hospitality OPERA 5 Property Services accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Hospitality OPERA 5 Property Services. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L).

Affected Products

Oracle hospitality_opera_5_property_services

References

CVE: CVE-2023-21932

Short Name

HTTP:CTS:OPERA-PRE-AUTH-RCE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Oracle Hospitality Opera pre-authentication Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?