Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-32266

Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.

Description

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation.   This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenText™ Application Lifecycle Management (ALM),Quality Center

Default version status: unaffected

  • 15.00affected
  • 15.01affected
  • 15.01 P1affected
  • 15.01 P2affected
  • 15.01 P3affected
  • 15.01 P4affected
  • 15.01 P5affected
  • 15.51affected
  • 15.51 P1affected
  • 15.51 P2affected
  • 15.51 P3affected
  • 16.00affected
  • 16.01 P1affected

References