Unauthorized Access Vulnerability in Primavera Unifier Mobile App by Oracle

CVE-2020-14618

Summary

A security vulnerability in the Primavera Unifier Mobile App by Oracle could allow unauthenticated attackers with network access via HTTPS to compromise the system. Exploiting this vulnerability requires human interaction from a user, potentially leading to unauthorized access to sensitive data. An attacker may gain complete access to all Primavera Unifier accessible data and perform unauthorized updates, inserts, or deletions. The supported version affected is prior to 20.6, emphasizing the importance of regular updates to mitigate such risks.

References