CVE-2016-3567: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3567?

CVE-2016-3567 is classified as a medium severity vulnerability.

Who is affected by CVE-2016-3567?

CVE-2016-3567 affects remote authenticated users of Oracle Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, and 16.1.

How do I fix CVE-2016-3567?

To fix CVE-2016-3567, it is recommended to apply the latest security patches provided by Oracle for the affected versions.

What types of impacts can CVE-2016-3567 have on my system?

CVE-2016-3567 can affect the confidentiality and integrity of the system due to its nature of exposure through web access.

Is there a workaround for CVE-2016-3567?

Currently, there are no documented workarounds for CVE-2016-3567, so applying the appropriate patch is the best course of action.