Access Vulnerability in Primavera Portfolio Management by Oracle

CVE-2022-21376

Summary

A vulnerability exists in the Primavera Portfolio Management product by Oracle that allows an unauthenticated attacker to exploit the system via an HTTP connection. This flaw enables the potential for unauthorized updates, inserts, and deletions of accessible data, while also allowing unauthorized read access to certain data. Successful exploitation of this vulnerability necessitates human interaction from a third party, raising concerns over the security of sensitive project data and the integrity of the management system.

References