CVE-2022-39168

2022-09-2916:15:09

CWE-522

[email protected]

web.nvd.nist.gov

ibm rpa proxy credentials ibm x-force id ibm robotic process automation clients vulnerability exposed upgrade logs

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

43.3%

JSON

IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.

Affected configurations

Nvd

Node

ibmrobotic_process_automationMatch21.0.3

ibmrobotic_process_automationMatch21.0.4

ibmrobotic_process_automation_for_cloud_pakMatch21.0.3

ibmrobotic_process_automation_for_cloud_pakMatch21.0.4

ibmrobotic_process_automation_for_servicesMatch21.0.3

ibmrobotic_process_automation_for_servicesMatch21.0.4

VendorProductVersionCPE
ibmrobotic_process_automation21.0.3cpe:2.3:a:ibm:robotic_process_automation:21.0.3:*:*:*:*:*:*:*
ibmrobotic_process_automation21.0.4cpe:2.3:a:ibm:robotic_process_automation:21.0.4:*:*:*:*:*:*:*
ibmrobotic_process_automation_for_cloud_pak21.0.3cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.3:*:*:*:*:*:*:*
ibmrobotic_process_automation_for_cloud_pak21.0.4cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.4:*:*:*:*:*:*:*
ibmrobotic_process_automation_for_services21.0.3cpe:2.3:a:ibm:robotic_process_automation_for_services:21.0.3:*:*:*:*:*:*:*
ibmrobotic_process_automation_for_services21.0.4cpe:2.3:a:ibm:robotic_process_automation_for_services:21.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	robotic_process_automation	21.0.3	cpe:2.3:a:ibm:robotic_process_automation:21.0.3:::::::*
ibm	robotic_process_automation	21.0.4	cpe:2.3:a:ibm:robotic_process_automation:21.0.4:::::::*
ibm	robotic_process_automation_for_cloud_pak	21.0.3	cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.3:::::::*
ibm	robotic_process_automation_for_cloud_pak	21.0.4	cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.4:::::::*
ibm	robotic_process_automation_for_services	21.0.3	cpe:2.3:a:ibm:robotic_process_automation_for_services:21.0.3:::::::*
ibm	robotic_process_automation_for_services	21.0.4	cpe:2.3:a:ibm:robotic_process_automation_for_services:21.0.4:::::::*