CVE-2018-2969: Medium severity oracle unifier vulnerability
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). The supported version that is affected is 16.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera Unifier accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-2969?
CVE-2018-2969 is considered to be easily exploitable and poses a significant security risk to affected Oracle Primavera Unifier installations.
How do I fix CVE-2018-2969?
To mitigate CVE-2018-2969, apply the latest security patches provided by Oracle for affected versions of Primavera Unifier.
Which versions of Primavera Unifier are affected by CVE-2018-2969?
CVE-2018-2969 affects Oracle Primavera Unifier versions 16.1, 16.2, 16.2.1.0, and 16.2.4.0.
Can I exploit CVE-2018-2969 with low privileges?
Yes, an attacker with low privileges and network access via HTTP can exploit CVE-2018-2969 to compromise Primavera Unifier.
What component of Oracle is impacted by CVE-2018-2969?
CVE-2018-2969 impacts the Primavera Unifier component within the Oracle Construction and Engineering Suite.