Unauthorized Access Vulnerability in Primavera Portfolio Management by Oracle

CVE-2020-14527

Summary

A vulnerability exists within the Primavera Portfolio Management product from Oracle, particularly affecting Web Access. This flaw allows an unauthenticated attacker with network access via HTTP the opportunity to compromise the system. Exploitation of this vulnerability necessitates human interaction from an individual other than the attacker. If successfully executed, the attacker can gain unauthorized access to critical data or potentially assume complete control over all accessible data within Primavera Portfolio Management. Furthermore, this vulnerability permits unauthorized updates, inserts, or deletions of certain data, posing a significant risk to the integrity and confidentiality of the information stored.

References