CVE-2023-32261

The CVE-2023-32261 case concerns the Micro Focus Dimensions CM Plugin for Jenkins. Multiple connected sources confirm a concrete issue: Dimensions Plugin versions 0.9.3 and earlier fail to perform a proper permission check in an HTTP endpoint, allowing users with Overall/Read access to enumerate ...

CVE-2023-32263

Technical details about CVE-2023-32263 are not publicly available in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2023-32262

The CVE-2023-32262 entry concerns the Micro Focus Dimensions CM Plugin for Jenkins. Affected versions (Dimensions Plugin 0.8.17–0.9.3) allow users with Item/Configure permission to access credentials that should be restricted, due to inadequate credential context for lookups. This exposes system-...