Lucene search
HistorySep 20, 2023 - 8:15 p.m.
CVE-2023-38718
ibm
robotic process automation
sensitive information
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0
Percentile
13.1%
IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606.
Affected configurations
Node
ibmrobotic_process_automationRange21.0.0–21.0.7.8
ORibmrobotic_process_automationRange23.0.0–23.0.8
Node
ibmrobotic_process_automationRange21.0.0–21.0.7.8cloud_pak
ORibmrobotic_process_automationRange23.0.0–23.0.8cloud_pak
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | robotic_process_automation | * | cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:* |
| ibm | robotic_process_automation | * | cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:cloud_pak:*:* |
Related
cve
cve
CVE-2023-38718
2023-09-20 20:15:11
prion
prion
Information disclosure
2023-09-20 20:15:00
cvelist
cvelist
CVE-2023-38718 IBM Robotic Process Automation information disclosure
2023-09-20 19:12:24
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0
Percentile
13.1%
Related for NVD:CVE-2023-38718