CVE-2018-2967: Medium severity oracle unifier vulnerability
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2967?
CVE-2018-2967 is classified as an easily exploitable vulnerability that requires physical access for exploitation.
How do I fix CVE-2018-2967?
To fix CVE-2018-2967, apply the latest security patches provided by Oracle for Primavera Unifier.
Which versions of Primavera Unifier are affected by CVE-2018-2967?
CVE-2018-2967 affects Primavera Unifier versions 16.x, 17.x, and 18.x.
Can CVE-2018-2967 be exploited remotely?
CVE-2018-2967 cannot be exploited remotely as it requires physical access to the system.
What component of Oracle is impacted by CVE-2018-2967?
CVE-2018-2967 impacts the Primavera Unifier component of the Oracle Construction and Engineering Suite.