Walk into any restaurant or retail store today and you’ll almost always encounter a point of sale (POS) system to authorize your payment. POS has undoubtedly helped businesses transition into becoming more digital, and ultimately more seamless, but at the turn of the new year, security firm, #ERPScan, discovered an exploitable vulnerability that can potentially affect businesses using Oracle’s Micros POS. Since the discovery, #Oracle has released a security patch that will address the potential vulnerability, but it’s noting that over 300,000 small businesses use Oracle’s #POS system on a daily basis, which if exploited in a cyber attack, can put a lot of small businesses at risk of being exposed in a data breach.
According to #HackerNews, using directory traversal flaw, an unauthorized insider with access to the vulnerable application could read sensitive files from the MICROS workstation, including service logs and configuration files, which ultimately will give #hackers access to user credentials that can easily be used for additional business accounts containing sensitive data. Stay protected!
To learn more about this potential vulnerability, click here.