Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-2967

Опубликовано: 18 июл. 2018
Источник: nvd
CVSS3: 5.3
CVSS2: 2.1
EPSS Низкий

Описание

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:16.2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:16.2.4.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:primavera_unifier:17.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.6:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.9:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.10:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.11:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:17.12:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:oracle:primavera_unifier:18.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:18.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:18.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:18.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:18.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:18.6:*:*:*:*:*:*:*
cpe:2.3:a:oracle:primavera_unifier:18.7:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00084
Низкий

5.3 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.3
github
больше 3 лет назад

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Unifier accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

EPSS

Процентиль: 25%
0.00084
Низкий

5.3 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo