Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32263
HistoryJul 19, 2023 - 4:15 p.m.

Code injection

2023-07-1916:15:00
PRIOn knowledge base
www.prio-n.com
6
code injection
micro focus dimensions cm plugin
jenkins
login certificate
vulnerability
exploitation
plugin configuration
nvd

0.001 Low

EPSS

Percentile

20.9%

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the Jenkins plugin is configured to use login certificate credentials.

https://www.jenkins.io/security/advisory/2023-06-14/

CPENameOperatorVersion
dimensions_cmge0.8.17
dimensions_cmle0.9.3

0.001 Low

EPSS

Percentile

20.9%

Related for PRION:CVE-2023-32263