Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-32266 EUVD-2023-36520GHSA-3wvx-jrh2-66c7

Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by OpenText

Description

Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to archive a malicious DLLs on the system prior to the installation.  

This issue affects Application Lifecycle Management (ALM),Quality Center: 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1.

Affected products

VendorProductAffectedFixed
OpenText™ Application Lifecycle Management (ALM),Quality Center 15.00, 15.01, 15.01 P1, 15.01 P2, 15.01 P3, 15.01 P4, 15.01 P5, 15.51, 15.51 P1, 15.51 P2, 15.51 P3, 16.00, 16.01 P1 —

References