Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56974
HistoryAug 04, 2022 - 12:00 a.m.

IBM Robotic Process Automation Information Disclosure Vulnerability (CNVD-2022-56974)

2022-08-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
13

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Robotic Process Automation is a robotic process automation product from IBM, Inc. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an information disclosure vulnerability that stems from improper management of permissions for storage provider types, which could be exploited by an attacker to gain access to sensitive information.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Related for CNVD-2022-56974