CVE-2016-3566: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3566?

CVE-2016-3566 has a medium severity rating, allowing remote attackers to impact confidentiality and integrity.

How do I fix CVE-2016-3566?

To fix CVE-2016-3566, update the affected Oracle Primavera P6 Enterprise Project Portfolio Management software to the latest version provided by Oracle.

Which versions of Oracle Primavera are affected by CVE-2016-3566?

CVE-2016-3566 affects Oracle Primavera P6 versions 8.3, 8.4, 15.1, 15.2, and 16.1.

What types of vulnerabilities are described in CVE-2016-3566?

CVE-2016-3566 describes vulnerabilities related to web access that can affect confidentiality and integrity.

Is there a workaround for CVE-2016-3566?

There is no official workaround for CVE-2016-3566, thus updating the software is the recommended solution.