CVE-2018-2967
First published: Wed Jul 18 2018(Updated: )
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Unifier | =16.1 | |
| Oracle Unifier | =16.2 | |
| Oracle Unifier | =16.2.1.0 | |
| Oracle Unifier | =16.2.4.0 | |
| Oracle Unifier | =17.1 | |
| Oracle Unifier | =17.2 | |
| Oracle Unifier | =17.3 | |
| Oracle Unifier | =17.4 | |
| Oracle Unifier | =17.5 | |
| Oracle Unifier | =17.6 | |
| Oracle Unifier | =17.7 | |
| Oracle Unifier | =17.8 | |
| Oracle Unifier | =17.9 | |
| Oracle Unifier | =17.10 | |
| Oracle Unifier | =17.11 | |
| Oracle Unifier | =17.12 | |
| Oracle Unifier | =18.1 | |
| Oracle Unifier | =18.2 | |
| Oracle Unifier | =18.3 | |
| Oracle Unifier | =18.4 | |
| Oracle Unifier | =18.5 | |
| Oracle Unifier | =18.6 | |
| Oracle Unifier | =18.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-2967?
CVE-2018-2967 is classified as an easily exploitable vulnerability that requires physical access for exploitation.
How do I fix CVE-2018-2967?
To fix CVE-2018-2967, apply the latest security patches provided by Oracle for Primavera Unifier.
Which versions of Primavera Unifier are affected by CVE-2018-2967?
CVE-2018-2967 affects Primavera Unifier versions 16.x, 17.x, and 18.x.
Can CVE-2018-2967 be exploited remotely?
CVE-2018-2967 cannot be exploited remotely as it requires physical access to the system.
What component of Oracle is impacted by CVE-2018-2967?
CVE-2018-2967 impacts the Primavera Unifier component of the Oracle Construction and Engineering Suite.
- agent/references
- agent/type
- agent/softwarecombine
- agent/author
- agent/severity
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle unifier
- version/oracle unifier/16.1
- version/oracle unifier/16.2
- version/oracle unifier/16.2.1.0
- version/oracle unifier/16.2.4.0
- version/oracle unifier/17.1
- version/oracle unifier/17.2
- version/oracle unifier/17.3
- version/oracle unifier/17.4
- version/oracle unifier/17.5
- version/oracle unifier/17.6
- version/oracle unifier/17.7
- version/oracle unifier/17.8
- version/oracle unifier/17.9
- version/oracle unifier/17.10
- version/oracle unifier/17.11
- version/oracle unifier/17.12
- version/oracle unifier/18.1
- version/oracle unifier/18.2
- version/oracle unifier/18.3
- version/oracle unifier/18.4
- version/oracle unifier/18.5
- version/oracle unifier/18.6
- version/oracle unifier/18.7