Security Hardening Guidance for Primavera P6 EPPM (WebLogic & DB Configuration)
We are performing an internal security vulnerability assessment for Primavera P6 EPPM.
Could you provide official guidance or documentation on:
- How to verify and disable anonymous/guest authentication in WebLogic used by P6 EPPM.
- How to check if plaintext system accounts exist in configuration files and the recommended way to encrypt or remove them.
- How to ensure database connection strings and passwords are encrypted (e.g., in datasource configuration files).
Are the above items acceptable even with the default settings?
0