CVE-2023-32266 — Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.

Description (CNA)

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation. This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1.

Affected (CNA)

Vendor / product	Versions
OpenText™ / Application Lifecycle Management (ALM),Quality Center	affected 15.00; affected 15.01; affected 15.01 P1; affected 15.01 P2; affected 15.01 P3; affected 15.01 P4; affected 15.01 P5; affected 15.51; affected 15.51 P1; affected 15.51 P2; affected 15.51 P3; affected 16.00; affected 16.01 P1

CWE

CWE-426

References

https://portal.microfocus.com/s/article/KM000024386?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.