Security Bulletin: IBM Robotic Process Automation is vulnerable to exposure of tenant credentials (CVE-2022-22505)

Summary

Security Bulletin: IBM Robotic Process Automation is vulnerable to exposure of tenant credentials (CVE-2022-22505)

Vulnerability Details

CVEID:CVE-2022-22505
**DESCRIPTION:**IBM Robotic Process Automation contains a vulnerability that could allow IBM tenant credentials to be exposed.
CVSS Base score: 4.6
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/227288 for the current score.
CVSS Vector: (CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

IBM strongly recommends addressing the vulnerability now.

Product(s)|**Version(s)
**|Remediation/Fix/Instructions
—|—|—
IBM Robotic Process Automation| < 21.0.3|

Download and install 21.0.3

IBM Robotic Process Auotmation for Cloud Pak| < 21.0.3| Download and Install 21.0.3
IBM Robotic Process Automation as a Service| All| No action required as IBM Robotic Process Automation as a Service servers have been updated to 21.0.3 or higher.

Workarounds and Mitigations

None