Skip to content
OpenAdvisories
Medium · 4.2 CVE-2023-32261 EUVD-2023-1923GHSA-27pr-r7hm-c2rc

Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3

Published Jul 19, 2023 · Updated Oct 29, 2024 · Assigned by OpenText

Vendor: Micro Focus Product: Dimensions CM Package: org.jenkins-ci.plugins:dimensionsscm Ecosystem: Maven

Description

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
See the following Jenkins security advisory for details: * https://www.jenkins.io/security/advisory/2023-06-14/ https://www.jenkins.io/security/advisory/2023-06-14/

Affected products

VendorProductAffectedFixed
Micro Focus Dimensions CM 0.8.17 – ≤ 0.9.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:dimensionsscm < 0.9.3.1 0.9.3.1 GHSA-27pr-r7hm-c2rc

Advisories 1

References