{"id":583,"date":"2020-04-24T05:18:47","date_gmt":"2020-04-24T13:18:47","guid":{"rendered":"https:\/\/nu-solutions.com\/?page_id=583"},"modified":"2020-10-21T12:53:18","modified_gmt":"2020-10-21T20:53:18","slug":"malicious-attacks","status":"publish","type":"page","link":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/","title":{"rendered":"Malicious Attacks"},"content":{"rendered":"

[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”3.22″][et_pb_row admin_label=”row” _builder_version=”4.4.4″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” custom_margin=”||0px||false|false” custom_padding=”||0px||false|false”][et_pb_column type=”4_4″ _builder_version=”3.25″ custom_padding=”|||” custom_padding__hover=”|||”][et_pb_text admin_label=”H1 – Protect your Primavera Enterprise systems from Malicious attacks” _builder_version=”4.6.5″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” hover_enabled=”0″ use_border_color=”off” border_color=”#ffffff” border_style=”solid” sticky_enabled=”0″]<\/p>\n

Primavera P6 Support<\/strong><\/h1>\n

Protect your Primavera Enterprise systems from Malicious attacks<\/h2>\n

April 24, 2020<\/em><\/p>\n

[\/et_pb_text][et_pb_text admin_label=”Background + Solution” _builder_version=”4.4.4″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” use_border_color=”off” border_color=”#ffffff” border_style=”solid”]<\/p>\n

Background<\/h3>\n

Any application using Apache Struts is at risk of several well-known, well-used, vulnerabilities.\u00a0 The hacking of Equifax (in 2017) began with an attack against Apache Struts; this attack allowed the attackers to install their own code inside the Equifax network and browse for months, harvesting sensitive data.<\/p>\n

    \n
  1. P6 Enterprise utilized Apache Struts in all versions until R18.4; all versions prior to R18.4 are vulnerable<\/li>\n
  2. Oracle Weblogic (used to deploy P6 Enterprise) has used Apache Struts in all versions; all unpatched versions are vulnerable. Patches for Weblogic are being produced for Weblogic 12.2.1.x; all older versions must be upgraded and then patched to remain secure.<\/li>\n<\/ol>\n

    Solution<\/h3>\n

    Based upon latest guidance, the most secure environment consists of the following:<\/p>\n

      \n
    1. Oracle Weblogic version 12.2.1.4 with latest patchsets; any older Weblogic versions must be upgraded<\/u><\/strong>.<\/li>\n
    2. P6 Enterprise R18.8 or R19.12, with latest patchsets; any older P6 Enterprise versions must be upgraded<\/u><\/strong>.<\/li>\n<\/ol>\n

       <\/p>\n

      How to check which versions you currently have:<\/h3>\n

       <\/p>\n

      [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.4.4″][et_pb_column type=”1_2″ _builder_version=”4.4.4″][et_pb_text admin_label=”You can check P6 Enterprise version from the login page:” _builder_version=”4.4.4″]<\/p>\n

      Check Weblogic version on the Console Login page for Weblogic, typically located at http:\/\/servername:7001\/console<\/strong><\/p>\n

      [\/et_pb_text][et_pb_image src=”https:\/\/nu-solutions.com\/wp-content\/uploads\/2020\/04\/image001.png” title_text=”image001″ _builder_version=”4.4.4″][\/et_pb_image][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.4.4″][et_pb_text admin_label=”You can check P6 Enterprise version from the login page:” _builder_version=”4.4.4″]<\/p>\n

      Check P6 Enterprise version from the login page:<\/strong><\/p>\n

      [\/et_pb_text][et_pb_image src=”https:\/\/nu-solutions.com\/wp-content\/uploads\/2020\/04\/image003.jpg” title_text=”image003″ _builder_version=”4.4.4″][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

      Primavera P6 Support Protect your Primavera Enterprise systems from Malicious attacks April 24, 2020 Background Any application using Apache Struts is at risk of several well-known, well-used, vulnerabilities.\u00a0 The hacking of Equifax (in 2017) began with an attack against Apache Struts; this attack allowed the attackers to install their own code inside the Equifax network […]<\/p>\n","protected":false},"author":10,"featured_media":0,"parent":70,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"yoast_head":"\nPrimavera P6 Support |Protect Your Primavera From Malicious Attacks<\/title>\n<meta name=\"description\" content=\"Protect your Primavera Enterprise systems from Malicious attacks. Contact us for Primavera P6 Support and to read more about protecting your systems.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Primavera P6 Support |Protect Your Primavera From Malicious Attacks\" \/>\n<meta property=\"og:description\" content=\"Protect your Primavera Enterprise systems from Malicious attacks. Contact us for Primavera P6 Support and to read more about protecting your systems.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/\" \/>\n<meta property=\"og:site_name\" content=\"Nu Solutions Consulting\" \/>\n<meta property=\"article:modified_time\" content=\"2020-10-21T20:53:18+00:00\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/\",\"url\":\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/\",\"name\":\"Primavera P6 Support |Protect Your Primavera From Malicious Attacks\",\"isPartOf\":{\"@id\":\"https:\/\/nu-solutions.com\/#website\"},\"datePublished\":\"2020-04-24T13:18:47+00:00\",\"dateModified\":\"2020-10-21T20:53:18+00:00\",\"description\":\"Protect your Primavera Enterprise systems from Malicious attacks. Contact us for Primavera P6 Support and to read more about protecting your systems.\",\"breadcrumb\":{\"@id\":\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nu-solutions.com\/support\/malicious-attacks\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nu-solutions.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/nu-solutions.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Malicious Attacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nu-solutions.com\/#website\",\"url\":\"https:\/\/nu-solutions.com\/\",\"name\":\"Nu Solutions Consulting\",\"description\":\"We know project management.\",\"publisher\":{\"@id\":\"https:\/\/nu-solutions.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nu-solutions.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/nu-solutions.com\/#organization\",\"name\":\"Nu Solutions Consulting\",\"url\":\"https:\/\/nu-solutions.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png\",\"contentUrl\":\"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png\",\"width\":398,\"height\":91,\"caption\":\"Nu Solutions Consulting\"},\"image\":{\"@id\":\"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Primavera P6 Support |Protect Your Primavera From Malicious Attacks","description":"Protect your Primavera Enterprise systems from Malicious attacks. Contact us for Primavera P6 Support and to read more about protecting your systems.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/","og_locale":"en_US","og_type":"article","og_title":"Primavera P6 Support |Protect Your Primavera From Malicious Attacks","og_description":"Protect your Primavera Enterprise systems from Malicious attacks. Contact us for Primavera P6 Support and to read more about protecting your systems.","og_url":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/","og_site_name":"Nu Solutions Consulting","article_modified_time":"2020-10-21T20:53:18+00:00","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/","url":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/","name":"Primavera P6 Support |Protect Your Primavera From Malicious Attacks","isPartOf":{"@id":"https:\/\/nu-solutions.com\/#website"},"datePublished":"2020-04-24T13:18:47+00:00","dateModified":"2020-10-21T20:53:18+00:00","description":"Protect your Primavera Enterprise systems from Malicious attacks. Contact us for Primavera P6 Support and to read more about protecting your systems.","breadcrumb":{"@id":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nu-solutions.com\/support\/malicious-attacks\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nu-solutions.com\/support\/malicious-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nu-solutions.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/nu-solutions.com\/support\/"},{"@type":"ListItem","position":3,"name":"Malicious Attacks"}]},{"@type":"WebSite","@id":"https:\/\/nu-solutions.com\/#website","url":"https:\/\/nu-solutions.com\/","name":"Nu Solutions Consulting","description":"We know project management.","publisher":{"@id":"https:\/\/nu-solutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nu-solutions.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/nu-solutions.com\/#organization","name":"Nu Solutions Consulting","url":"https:\/\/nu-solutions.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png","contentUrl":"https:\/\/nu-solutions.com\/wp-content\/uploads\/2015\/02\/logo_wide.png","width":398,"height":91,"caption":"Nu Solutions Consulting"},"image":{"@id":"https:\/\/nu-solutions.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages\/583"}],"collection":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/comments?post=583"}],"version-history":[{"count":0,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages\/583\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/pages\/70"}],"wp:attachment":[{"href":"https:\/\/nu-solutions.com\/wp-json\/wp\/v2\/media?parent=583"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}