CVE-2023-32263: Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the Jenkins plugin is configured to use login certificate credentials.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-32263?
CVE-2023-32263 is a potential vulnerability in the Micro Focus Dimensions CM Plugin for Jenkins that could allow an attacker to retrieve a login certificate if an authenticated user is tricked into using an attacker-controlled Dimensions CM server.
How severe is CVE-2023-32263?
CVE-2023-32263 has a severity rating of 5.7, which is considered medium.
Which software is affected by CVE-2023-32263?
The Micro Focus Dimensions CM Plugin for Jenkins version 0.8.17 to 0.9.3 is affected by CVE-2023-32263.
How can the vulnerability be exploited?
The vulnerability can be exploited by duping an authenticated user into using an attacker-controlled Dimensions CM server to retrieve a login certificate.
Where can I find more information about CVE-2023-32263?
More information about CVE-2023-32263 can be found at the Micro Focus Knowledge Article KM000019293 and the Jenkins Plugin page.