CVE-2023-32263
LOWMicro Focus Dimensions CM Plugin for Jenkins - Info Disclosure
Title source: llmDescription
A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login certificate if an authenticated user is duped into using an attacker-controlled Dimensions CM server. This vulnerability only applies when the Jenkins plugin is configured to use login certificate credentials. https://www.jenkins.io/security/advisory/2023-06-14/
References (2)
Core 2
Core References
Vendor Advisory
https://portal.microfocus.com/s/article/KM000019293
Scores
CVSS v3
2.6
EPSS
0.0032
EPSS Percentile
54.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (2)
microfocus/dimensions_cm
0.8.17 - 0.9.3
org.jenkins-ci.plugins/dimensionsscm
0.8.17 - 0.9.3.1Maven
Published
Jul 19, 2023
Tracked Since
Feb 18, 2026