CVE-2022-43844 IBM Robotic Process Automation for Cloud Pak session fixation

2023-01-0517:19:27

CWE-613

ibm

www.cve.org

ibm

rpa

cloud pak

session fixation

vulnerability

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Robotic Process Automation for Cloud Pak",
    "vendor": "IBM",
    "versions": [
      {
        "lessThan": "21.0.3",
        "status": "affected",
        "version": "20.12",
        "versionType": "semver"
      }
    ]
  }
]