Lucene search
IbmCVELIST:CVE-2022-34338HistoryJul 31, 2022 - 5:31 p.m.
CVE-2022-34338
2022-07-3117:31:09
ibm
www.cve.org
3
ibm
rpa
21.0.x
privilege management
vulnerability
CVSS3
5.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
23.7%
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. IBM X-Force ID: 229962.
CNA Affected
[
{
"product": "Robotic Process Automation",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "21.0.0"
},
{
"status": "affected",
"version": "21.0.1"
},
{
"status": "affected",
"version": "21.0.2"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2022-08-01 11:15:00
ibm
ibm
nvd
nvd
CVE-2022-34338
2022-08-01 11:15:14
cnvd
cnvd
cve
cve
CVE-2022-34338
2022-08-01 11:15:14
CVSS3
5.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
AI Score
6.3
Confidence
High
EPSS
0.001
Percentile
23.7%
Related for CVELIST:CVE-2022-34338