Lucene search
IbmCVELIST:CVE-2022-33169HistoryJul 31, 2022 - 5:30 p.m.
CVE-2022-33169
2022-07-3117:30:58
ibm
www.cve.org
3
ibm
robotic process automation
insufficiently protected credentials
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
23.7%
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888.
CNA Affected
[
{
"product": "Robotic Process Automation",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "21.0.0"
},
{
"status": "affected",
"version": "21.0.1"
},
{
"status": "affected",
"version": "21.0.2"
}
]
}
]Related
nvd
nvd
CVE-2022-33169
2022-08-01 11:15:13
ibm
ibm
prion
prion
Design/Logic Flaw
2022-08-01 11:15:00
cve
cve
CVE-2022-33169
2022-08-01 11:15:13
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
23.7%
Related for CVELIST:CVE-2022-33169