MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `File.createTempFile(..)` results in temporary files being created with the permissions `-rw-r--r--`. This means that any other user on the system can read the contents of this file. When MPXJ is reading a schedule file which requires the creation of a temporary file or directory, a knowledgeable local user could locate these transient files while they are in use and would then be able to read the schedule being processed by MPXJ. The problem has been patched, MPXJ version 10.14.1 and later includes the necessary changes. Users unable to upgrade may set `java.io.tmpdir` to a directory to which only the user running the application has access will prevent other users from accessing these temporary files.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - MPXJ is an open source library to read and write project plans from a variety of file formats and
    databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `File.createTempFile(..)`
    results in temporary files being created with the permissions `-rw-r--r--`. This means that any other user
    on the system can read the contents of this file. When MPXJ is reading a schedule file which requires the
    creation of a temporary file or directory, a knowledgeable local user could locate these transient files
    while they are in use and would then be able to read the schedule being processed by MPXJ. The problem has
    been patched, MPXJ version 10.14.1 and later includes the necessary changes. Users unable to upgrade may
    set `java.io.tmpdir` to a directory to which only the user running the application has access will prevent
    other users from accessing these temporary files. (CVE-2022-41954)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2023 CPU advisory.

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: User     Interface (jQueryUI)). Supported versions that are affected are 19.12.0-19.12.16, 20.12.0-20.12.16,     21.12.0-21.12.16 and 22.12.0-22.12.9. Easily exploitable vulnerability allows low privileged attacker with     network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from     a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read     access to a subset of Primavera Unifier accessible data. (CVE-2022-31160)

  - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform     (MPXJ)). Supported versions that are affected are 19.12.0-19.12.16, 20.12.0-20.12.16, 21.12.0-21.12.16 and     22.12.0-22.12.9. Easily exploitable vulnerability allows low privileged attacker with logon to the     infrastructure where Primavera Unifier executes to compromise Primavera Unifier. Successful attacks of     this vulnerability can result in unauthorized read access to a subset of Primavera Unifier accessible     data. (CVE-2022-41954)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
416306	SCA: security update for mpxj, net.sf.mpxj, net.sf.mpxj-for-csharp, net.sf.mpxj-for-vb, net.sf.mpxj:mpxj (GHSA-jf2p-4gqj-849g)	Tenable Cloud Security	SCA Checks	Local	low
416306	SCA: security update for mpxj, net.sf.mpxj, net.sf.mpxj-for-csharp, net.sf.mpxj-for-vb, net.sf.mpxj:mpxj (GHSA-jf2p-4gqj-849g)	Tenable Self-Hosted Container Security	SCA Checks	Local	low
183393	Oracle Primavera Unifier (October 2023 CPU)	Nessus	CGI abuses	Remote	medium

Detections

Analytics

CVE-2022-41954

low

Tenable Plugins

low

low

medium