Lucene search

K
ibmIBM817620B0506B6BCB2C5D93308C2AE3BFA433D2C3F6E2DB2C1ADCA462CDD5AED2
HistoryJun 28, 2019 - 11:45 a.m.

Security Bulletin: IBM Robotic Process Automation Ignite Cluster Nodes are missing authentication (CVE-2019-4337)

2019-06-2811:45:01
www.ibm.com
5

0.001 Low

EPSS

Percentile

28.0%

Summary

IBM Robotic Process Automation Ignite Cluster Nodes are missing authentication

Vulnerability Details

CVEID: CVE-2019-4337 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow an attacker to obtain sensitive information due to missing authentication in Ignite nodes.
CVSS Base Score: 5.3
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/161412&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected IBM Robotic Process Automation with Automation Anywhere Affected Versions
IBM Robotic Process Automation with Automation Anywhere 11.0

Remediation/Fixes

Product VRMF APAR Remediation / First Fix
IBM Robotic Process Automation with Automation Anywhere 11.0.0.4 JR61043 IBM Robotic Process Automation with Automation Anywhere v11.0.0.5

Workarounds and Mitigations

None

0.001 Low

EPSS

Percentile

28.0%

Related for 817620B0506B6BCB2C5D93308C2AE3BFA433D2C3F6E2DB2C1ADCA462CDD5AED2