Authentication Bypass Vulnerability in Oracle Primavera Unifier

CVE-2018-2968

Summary

An authentication bypass vulnerability exists within the Primavera Unifier component of Oracle's Construction and Engineering Suite. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the application's security. Exploitation of this vulnerability necessitates human interaction from a user who is not the attacker. Successful exploitation can lead to unauthorized actions, including the creation, deletion, or alteration of critical data, thereby putting all data accessible through Primavera Unifier at significant risk.

References