Exploitable Vulnerability in Primavera Unifier by Oracle

CVE-2018-2966

Summary

An exploitable vulnerability exists in the Primavera Unifier component of the Oracle Construction and Engineering Suite, allowing an unauthenticated attacker with network access via HTTP to compromise the system. The vulnerability primarily resides within Primavera Unifier, yet it poses a risk that may also affect other products within the suite. Successful exploitation requires human interaction from a user other than the attacker, which makes timing and social engineering pivotal to an attack. If exploited, it can lead to unauthorized creation, deletion, or modification of critical data, thereby putting sensitive information at risk.

References