CVE-2018-2963

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.x, and 16.x

Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management, resulting in unauthorized read access to a subset of accessible data.

Recommendations For versions 8.4, 15.x, and 16.x, update to a version that contains a fix for this issue, as no specific workaround or mitigation measures are provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.