Lucene search
IbmCVE-2023-23476HistoryAug 02, 2023 - 3:15 p.m.
CVE-2023-23476
2023-08-0215:15:10
CWE-863
ibm
web.nvd.nist.gov
2482
ibm
rpa
robotic process automation
cve-2023-23476
data access
authorization validation
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
26.1%
IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization validation on some API routes. IBM X-Force ID: 245425.
Affected configurations
Node
ibmrobotic_process_automationRange21.0.0–23.0.0
ORibmrobotic_process_automation_for_cloud_pakRange21.0.0–23.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | robotic_process_automation | * | cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:* |
| ibm | robotic_process_automation_for_cloud_pak | * | cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Robotic Process Automation",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "21.0.7.latest",
"status": "affected",
"version": "21.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Robotic Process Automation for Cloud Pak",
"vendor": "IBM",
"versions": [
{
"lessThanOrEqual": "21.0.7.latest",
"status": "affected",
"version": "21.0.0",
"versionType": "semver"
}
]
}
]Related
ibm
ibm
cnvd
cnvd
IBM Robotic Process Automation License Issue Vulnerability (CNVD-2023-68780)
2023-08-06 00:00:00
cvelist
cvelist
CVE-2023-23476 IBM Robotic Process Automation information disclosure
2023-08-02 14:40:34
prion
prion
Authorization
2023-08-02 15:15:00
nvd
nvd
CVE-2023-23476
2023-08-02 15:15:10
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
26.1%
Related for CVE-2023-23476