CVE-2010-3534

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.21.3.0 and 7.0.1.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Project Management Module.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
http://www.securityfocus.com/bid/44019
http://www.us-cert.gov/cas/techalerts/TA10-287A.html	US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oracle:primavera_product_suite:6.21.3.0:::::::*
	cpe:2.3:a:oracle:primavera_product_suite:7.0.1.0:::::::*

History

No history.

Information

Published : 2010-10-14 18:00

Updated : 2023-12-10 11:03

NVD link : CVE-2010-3534

Mitre link : CVE-2010-3534

CVE.ORG link : CVE-2010-3534

JSON object : View

Products Affected

oracle

primavera_product_suite

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-3534", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-10-14T18:00:17.007", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/44019", "source": "secalert_us@oracle.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html", "tags": ["US Government Resource"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 6.21.3.0 and 7.0.1.0 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Project Management Module."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el componente Primavera P6 Enterprise Project Portfolio Management de Oracle Primavera Products Suite v6.21.3.0 y v7.0.1.0 permite a usuarios locales comprometer la confidencialidad, integridad y disponibilidad mediante vectores desconocidos relacionados con el M\u00f3dulo Project Management."}], "lastModified": "2017-09-09T01:29:00.360", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:primavera_product_suite:6.21.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF59A4FB-E6D3-47DD-AFC3-6CBFAB8D7D94"}, {"criteria": "cpe:2.3:a:oracle:primavera_product_suite:7.0.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7AF641EB-C271-4593-91D0-7767893753B7"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}