{"id":496,"date":"2017-03-27T13:17:31","date_gmt":"2017-03-27T21:17:31","guid":{"rendered":"http:\/\/nusolutionsc.wpengine.com\/?page_id=496"},"modified":"2020-10-21T12:56:07","modified_gmt":"2020-10-21T20:56:07","slug":"primavera-p6-web-security-vulnerability","status":"publish","type":"page","link":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/","title":{"rendered":"Primavera P6 Web Security Vulnerability"},"content":{"rendered":"

[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”3.22″][et_pb_row admin_label=”row” _builder_version=”3.25″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text admin_label=”H1 – Primavera P6 Web Security Vulnerability” _builder_version=”4.6.5″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ use_border_color=”off” border_color=”#ffffff” border_style=”solid” sticky_enabled=”0″]<\/p>\n

P6 Web Access<\/strong><\/h1>\n

Primavera P6 Web Security Vulnerability<\/h2>\n

Monday, March 27, 2017<\/em><\/p>\n

[\/et_pb_text][et_pb_text admin_label=”Issue Details” _builder_version=”3.27.4″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” use_border_color=”off” border_color=”#ffffff” border_style=”solid”]<\/p>\n

Urgency<\/h4>\n

High \u2013 a customer system has been compromised by this vulnerability and remote attackers gained access to the server.<\/p>\n

Who this affects:<\/h4>\n

Customers who have any version of P6 Web Access that is externally accessible from the Internet. Customers who have P6 Web Access that is only available within their network are not under as high of a risk, but should still consider upgrading\/patching.<\/p>\n

What is the risk?<\/h4>\n

There is a security vulnerability in P6 Web and Oracle Weblogic that could allow remote attackers to gain access to the server running P6 Web.<\/p>\n

Hosted Solution<\/h4>\n

Nu Solutions offers a hosted solution using Amazon Web Services for Primavera users starting at $50 per month. Cloud security at AWS is the highest priority. Oracle Critical patch sets are applied when released.\u00a0 Nightly back-ups, 99.6% up time, etc.\u00a0 Users can connect anywhere in the US & Canada.\u00a0 Please contact jake@nu-solutions.com for more info.<\/p>\n

Oracle has released a Critical Patch update that includes the Primavera Web applications. One of the vulnerabilities in P6 Web Access is rated a \u201c10\u201d score, which is the highest severity. Per this web page, https:\/\/www.infosecurity-magazine.com\/news\/oracle-admins-faced-270-fixes\/ the exploit could allow remote access to a Primavera Web Access system to add, modify, or delete data.
\n[\/et_pb_text][et_pb_image src=”https:\/\/nu-solutions.com\/wp-content\/uploads\/2017\/03\/image003.png” align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” admin_label=”Image – Risk Matrix” _builder_version=”3.23″ use_border_color=”off” border_color=”#ffffff” border_style=”solid” animation=”off” sticky=”off” always_center_on_mobile=”on”][\/et_pb_image][et_pb_text admin_label=”Text – The solution” _builder_version=”3.27.4″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” use_border_color=”off” border_color=”#ffffff” border_style=”solid”]<\/p>\n

The Solution<\/h4>\n

The patchsets listed below are required to mitigate the vulnerability for each release, except for R8.2 which is no longer patched for security issues, and must be upgraded to a more recent release.<\/p>\n

Oracle Support Document 2212754.1 (Critical Patch Update January 2017 Patch Availability Document for Oracle Primavera Products) can be found at: https:\/\/support.oracle.com\/epmos\/faces\/DocumentDisplay?id=2212754.1<\/a>
\n[\/et_pb_text][et_pb_image src=”https:\/\/nu-solutions.com\/wp-content\/uploads\/2017\/03\/image004.png” align_tablet=”center” align_phone=”” align_last_edited=”on|desktop” admin_label=”Image – Patch Update Availability” _builder_version=”3.23″ use_border_color=”off” border_color=”#ffffff” border_style=”solid” animation=”off” sticky=”off” always_center_on_mobile=”on”][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

P6 Web Access Primavera P6 Web Security Vulnerability Monday, March 27, 2017 Urgency High \u2013 a customer system has been compromised by this vulnerability and remote attackers gained access to the server. Who this affects: Customers who have any version of P6 Web Access that is externally accessible from the Internet. Customers who have P6 […]<\/p>\n","protected":false},"author":10,"featured_media":0,"parent":70,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"yoast_head":"\nP6 Web Access | Primavera P6 Web Security Vulnerability<\/title>\n<meta name=\"description\" content=\"Your current version of P6 Web Access may leave you highly susceptible to hacking. Read about how to protect your project from Primavera P6 web security vulnerabilities.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"P6 Web Access | Primavera P6 Web Security Vulnerability\" \/>\n<meta property=\"og:description\" content=\"Your current version of P6 Web Access may leave you highly susceptible to hacking. Read about how to protect your project from Primavera P6 web security vulnerabilities.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/\" \/>\n<meta property=\"og:site_name\" content=\"Nu Solutions Consulting\" \/>\n<meta property=\"article:modified_time\" content=\"2020-10-21T20:56:07+00:00\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/\",\"url\":\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/\",\"name\":\"P6 Web Access | Primavera P6 Web Security Vulnerability\",\"isPartOf\":{\"@id\":\"https:\/\/nu-solutions.com\/#website\"},\"datePublished\":\"2017-03-27T21:17:31+00:00\",\"dateModified\":\"2020-10-21T20:56:07+00:00\",\"description\":\"Your current version of P6 Web Access may leave you highly susceptible to hacking. Read about how to protect your project from Primavera P6 web security vulnerabilities.\",\"breadcrumb\":{\"@id\":\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nu-solutions.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/nu-solutions.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Primavera P6 Web Security Vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nu-solutions.com\/#website\",\"url\":\"https:\/\/nu-solutions.com\/\",\"name\":\"Nu Solutions Consulting\",\"description\":\"We know project management.\",\"publisher\":{\"@id\":\"https:\/\/nu-solutions.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nu-solutions.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nu-solutions.com\/#organization\",\"name\":\"Nu Solutions Consulting\",\"url\":\"https:\/\/nu-solutions.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png\",\"contentUrl\":\"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png\",\"width\":398,\"height\":91,\"caption\":\"Nu Solutions Consulting\"},\"image\":{\"@id\":\"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"P6 Web Access | Primavera P6 Web Security Vulnerability","description":"Your current version of P6 Web Access may leave you highly susceptible to hacking. Read about how to protect your project from Primavera P6 web security vulnerabilities.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/","og_locale":"en_US","og_type":"article","og_title":"P6 Web Access | Primavera P6 Web Security Vulnerability","og_description":"Your current version of P6 Web Access may leave you highly susceptible to hacking. Read about how to protect your project from Primavera P6 web security vulnerabilities.","og_url":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/","og_site_name":"Nu Solutions Consulting","article_modified_time":"2020-10-21T20:56:07+00:00","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/","url":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/","name":"P6 Web Access | Primavera P6 Web Security Vulnerability","isPartOf":{"@id":"https:\/\/nu-solutions.com\/#website"},"datePublished":"2017-03-27T21:17:31+00:00","dateModified":"2020-10-21T20:56:07+00:00","description":"Your current version of P6 Web Access may leave you highly susceptible to hacking. Read about how to protect your project from Primavera P6 web security vulnerabilities.","breadcrumb":{"@id":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nu-solutions.com\/support\/primavera-p6-web-security-vulnerability\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nu-solutions.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/nu-solutions.com\/support\/"},{"@type":"ListItem","position":3,"name":"Primavera P6 Web Security Vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/nu-solutions.com\/#website","url":"https:\/\/nu-solutions.com\/","name":"Nu Solutions Consulting","description":"We know project management.","publisher":{"@id":"https:\/\/nu-solutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nu-solutions.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/nu-solutions.com\/#organization","name":"Nu Solutions Consulting","url":"https:\/\/nu-solutions.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png","contentUrl":"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png","width":398,"height":91,"caption":"Nu Solutions Consulting"},"image":{"@id":"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages\/496"}],"collection":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/comments?post=496"}],"version-history":[{"count":0,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages\/496\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages\/70"}],"wp:attachment":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/media?parent=496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}