Vulnerability · Published Oct 16, 2024 · Assigned by OpenText
CVE-2023-32266Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.
Medium 5.3
In plain English
A medium-severity security flaw in Application Lifecycle Management (ALM),Quality Center from OpenText™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Official description
Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation. This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenText™ | Application Lifecycle Management (ALM),Quality Center | 15.0015.0115.01 P115.01 P215.01 P315.01 P415.01 P515.51 |
Weakness: CWE-426 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/S:N/AU:N/V:D/RE:L/U:Clear