What is the severity of CVE-2017-3501?

The severity of CVE-2017-3501 is classified as easily exploitable, allowing an unauthenticated attacker to compromise affected systems.

How do I fix CVE-2017-3501?

To fix CVE-2017-3501, update Oracle Primavera Unifier to the latest patched version as recommended in the security advisory.

What versions of Oracle Primavera Unifier are affected by CVE-2017-3501?

Affected versions listed for CVE-2017-3501 include 9.13, 9.14, 10.0, 10.1, 15.1, and 15.2.

Can CVE-2017-3501 be exploited remotely?

Yes, CVE-2017-3501 can be exploited remotely by an attacker with network access via HTTP.

Are there any mitigations for CVE-2017-3501 before applying a patch?

Temporary mitigations for CVE-2017-3501 may include restricting network access to the vulnerable service until the patch is applied.

Vulnerability/
CVE-2017-3501

medium

6.1

24/4/2017

7/10/2024

CVE-2017-3501

First published: Mon Apr 24 2017(Updated: )

Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). Supported versions that are affected are 9.13, 9.14, 10.0, 10.1, 15.1 and 15.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Unifier accessible data as well as unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

Credit: secalert_us@oracle.com

Affected Software	Affected Version	How to fix
Oracle Primavera Unifier	=9.13
Oracle Primavera Unifier	=9.14
Oracle Primavera Unifier	=10.0
Oracle Primavera Unifier	=10.1
Oracle Primavera Unifier	=15.1
Oracle Primavera Unifier	=15.2

Remedy

http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-3501?
The severity of CVE-2017-3501 is classified as easily exploitable, allowing an unauthenticated attacker to compromise affected systems.
How do I fix CVE-2017-3501?
To fix CVE-2017-3501, update Oracle Primavera Unifier to the latest patched version as recommended in the security advisory.
What versions of Oracle Primavera Unifier are affected by CVE-2017-3501?
Affected versions listed for CVE-2017-3501 include 9.13, 9.14, 10.0, 10.1, 15.1, and 15.2.
Can CVE-2017-3501 be exploited remotely?
Yes, CVE-2017-3501 can be exploited remotely by an attacker with network access via HTTP.
Are there any mitigations for CVE-2017-3501 before applying a patch?
Temporary mitigations for CVE-2017-3501 may include restricting network access to the vulnerable service until the patch is applied.

agent/type
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/references
agent/remedy
agent/softwarecombine
agent/first-publish-date
agent/event
agent/description
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/oracle
canonical/oracle primavera unifier
version/oracle primavera unifier/9.13
version/oracle primavera unifier/9.14
version/oracle primavera unifier/10.0
version/oracle primavera unifier/10.1
version/oracle primavera unifier/15.1
version/oracle primavera unifier/15.2