First published: Wed Jul 18 2018(Updated: )
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
Oracle Primavera Unifier | =16.1 | |
Oracle Primavera Unifier | =16.2 | |
Oracle Primavera Unifier | =16.2.1.0 | |
Oracle Primavera Unifier | =16.2.4.0 | |
Oracle Primavera Unifier | =17.1 | |
Oracle Primavera Unifier | =17.2 | |
Oracle Primavera Unifier | =17.3 | |
Oracle Primavera Unifier | =17.4 | |
Oracle Primavera Unifier | =17.5 | |
Oracle Primavera Unifier | =17.6 | |
Oracle Primavera Unifier | =17.7 | |
Oracle Primavera Unifier | =17.8 | |
Oracle Primavera Unifier | =17.9 | |
Oracle Primavera Unifier | =17.10 | |
Oracle Primavera Unifier | =17.11 | |
Oracle Primavera Unifier | =17.12 | |
Oracle Primavera Unifier | =18.1 | |
Oracle Primavera Unifier | =18.2 | |
Oracle Primavera Unifier | =18.3 | |
Oracle Primavera Unifier | =18.4 | |
Oracle Primavera Unifier | =18.5 | |
Oracle Primavera Unifier | =18.6 | |
Oracle Primavera Unifier | =18.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-2967 is classified as an easily exploitable vulnerability that requires physical access for exploitation.
To fix CVE-2018-2967, apply the latest security patches provided by Oracle for Primavera Unifier.
CVE-2018-2967 affects Primavera Unifier versions 16.x, 17.x, and 18.x.
CVE-2018-2967 cannot be exploited remotely as it requires physical access to the system.
CVE-2018-2967 impacts the Primavera Unifier component of the Oracle Construction and Engineering Suite.