cnvd-2017-00908
Vulnerability from cnvd

Title: Oracle Primavera产品远程漏洞

Description:

Oracle Primavera ProductsPrimavera Products Suite是美国甲骨文(Oracle)公司的一款项目组合管理解决方案套件产品。Primavera P6 Enterprise Project Portfolio Management(P6 EPPM)是其中的一个用于项目的规划、管理和执行的组件。

Oracle Primavera Products Suite中的P6 EPPM组件中的Web Access子组件存在安全漏洞。攻击者可利用该漏洞未授权访问、创建、删除或修改,造成拒绝服务,影响数据的保密性、完整性和可用性。

Severity:

Patch Name: Oracle Primavera产品远程漏洞的补丁

Patch Description:

Oracle Primavera ProductsPrimavera Products Suite是美国甲骨文(Oracle)公司的一款项目组合管理解决方案套件产品。Primavera P6 Enterprise Project Portfolio Management(P6 EPPM)是其中的一个用于项目的规划、管理和执行的组件。

Oracle Primavera Products Suite中的P6 EPPM组件中的Web Access子组件存在安全漏洞。攻击者可利用该漏洞未授权访问、创建、删除或修改,造成拒绝服务,影响数据的保密性、完整性和可用性。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。

Formal description:

目前厂商已经发布了升级补丁以修复此安全问题,补丁获取链接: http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html

Reference: http://www.securityfocus.com/bid/95528

Impacted products
Name
['Oracle Primavera P6 Enterprise Project Portfolio Management 8.3', 'Oracle Primavera Products Suite', 'Oracle Primavera P6 Enterprise Project Portfolio Management 8.4', 'Oracle Primavera P6 Enterprise Project Portfolio Management 8.3', 'Oracle Primavera P6 Enterprise Project Portfolio Management 8.2', 'Oracle Primavera P6 Enterprise Project Portfolio Management 16.2', 'Oracle Primavera P6 Enterprise Project Portfolio Management 16.1', 'Oracle Primavera P6 Enterprise Project Portfolio Management 15.2', 'Oracle Primavera P6 Enterprise Project Portfolio Management 15.1']
Show details on source website


{
  "bids": {
    "bid": {
      "bidNumber": "95528"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-3324",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3324"
    }
  },
  "description": "Oracle Primavera ProductsPrimavera Products Suite\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u9879\u76ee\u7ec4\u5408\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u5957\u4ef6\u4ea7\u54c1\u3002Primavera P6 Enterprise Project Portfolio Management\uff08P6 EPPM\uff09\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7528\u4e8e\u9879\u76ee\u7684\u89c4\u5212\u3001\u7ba1\u7406\u548c\u6267\u884c\u7684\u7ec4\u4ef6\u3002\r\n\r\nOracle Primavera Products Suite\u4e2d\u7684P6 EPPM\u7ec4\u4ef6\u4e2d\u7684Web Access\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u672a\u6388\u6743\u8bbf\u95ee\u3001\u521b\u5efa\u3001\u5220\u9664\u6216\u4fee\u6539\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u3002",
  "discovererName": "Oracle",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-00908",
  "openTime": "2017-02-05",
  "patchDescription": "Oracle Primavera ProductsPrimavera Products Suite\u662f\u7f8e\u56fd\u7532\u9aa8\u6587\uff08Oracle\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u9879\u76ee\u7ec4\u5408\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u5957\u4ef6\u4ea7\u54c1\u3002Primavera P6 Enterprise Project Portfolio Management\uff08P6 EPPM\uff09\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7528\u4e8e\u9879\u76ee\u7684\u89c4\u5212\u3001\u7ba1\u7406\u548c\u6267\u884c\u7684\u7ec4\u4ef6\u3002\r\n\r\nOracle Primavera Products Suite\u4e2d\u7684P6 EPPM\u7ec4\u4ef6\u4e2d\u7684Web Access\u5b50\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u672a\u6388\u6743\u8bbf\u95ee\u3001\u521b\u5efa\u3001\u5220\u9664\u6216\u4fee\u6539\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff0c\u5f71\u54cd\u6570\u636e\u7684\u4fdd\u5bc6\u6027\u3001\u5b8c\u6574\u6027\u548c\u53ef\u7528\u6027\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Oracle Primavera\u4ea7\u54c1\u8fdc\u7a0b\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Oracle Primavera P6 Enterprise Project Portfolio Management 8.3",
      "Oracle Primavera Products Suite",
      "Oracle Primavera P6 Enterprise Project Portfolio Management 8.4",
      "Oracle Primavera P6 Enterprise Project Portfolio Management  8.3",
      "Oracle Primavera P6 Enterprise Project Portfolio Management  8.2",
      "Oracle Primavera P6 Enterprise Project Portfolio Management  16.2",
      "Oracle Primavera P6 Enterprise Project Portfolio Management  16.1",
      "Oracle Primavera P6 Enterprise Project Portfolio Management  15.2",
      "Oracle Primavera P6 Enterprise Project Portfolio Management  15.1"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/95528",
  "serverity": "\u9ad8",
  "submitTime": "2017-01-20",
  "title": "Oracle Primavera\u4ea7\u54c1\u8fdc\u7a0b\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…