Improper access control

2023-01-0518:15:00

PRIOn knowledge base

www.prio-n.com

ibm

rpa

cloud pak

access control

vulnerability

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.

CPENameOperatorVersion
robotic_process_automation_for_cloud_pakge20.12
robotic_process_automation_for_cloud_paklt21.0.3.1

CPE	Name	Operator	Version
	robotic_process_automation_for_cloud_pak	ge	20.12
	robotic_process_automation_for_cloud_pak	lt	21.0.3.1

References

exchange.xforce.ibmcloud.com/vulnerabilities/239081

www.ibm.com/support/pages/node/6852663