Unauthorized Access Vulnerability in Oracle Primavera P6 Project Management

CVE-2019-2512

Summary

A vulnerability exists in the Primavera P6 Enterprise Project Portfolio Management component of Oracle's Construction and Engineering Suite. This flaw can be exploited by unauthenticated attackers with network access through HTTP, enabling potential manipulation of accessible data. Successful exploitation requires human interaction from an unsuspecting user. The impact includes unauthorized updates, inserts, or deletions of certain data, as well as unauthorized read access to specific subsets of Primavera P6 data. This vulnerability highlights the importance of securing web access to critical project management systems.

References