Vulnerability in Oracle Primavera P6 Project Management Software

CVE-2020-2594

Summary

This vulnerability occurs within the Primavera P6 Enterprise Project Portfolio Management software, where an attacker with low privileges and network access can exploit the system via HTTP. The attack depends on human interaction, which could lead to significant unauthorized actions, including updates, deletions, and unauthorized reading of accessible data. Furthermore, this vulnerability has the potential to result in a partial denial of service of the affected product. Organizations using supported versions must take appropriate actions to mitigate risks associated with this issue, as it not only affects Primavera P6 but could also compromise other integrated products.

References