Lucene search

K
ibmIBM96191A49B3F02AC5AE321682CD42E4B28EA4FCE364975BA965D6276AB96661F8
HistoryOct 30, 2018 - 6:35 p.m.

Security Bulletin: Passwords printed to log files in IBM Robotic Process Automation with Automation Anywhere (CVE-2018-1876)

2018-10-3018:35:02
www.ibm.com
6

0.0004 Low

EPSS

Percentile

12.7%

Summary

IBM Robotic Process Automation with Automation Anywhere log files may contain plain text password in some cases

Vulnerability Details

CVEID: CVE-2018-1876 DESCRIPTION: IBM Robotic Process Automation could under certain cases, display the password in a Control Room log file after installation.
CVSS Base Score: 6.2
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/151707&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

Affected IBM Robotic Process Automation with Automation Anywhere Affected Versions
IBM Robotic Process Automation with Automation Anywhere 11.0

Remediation/Fixes

Product VRMF APAR Remediation / First Fix
IBM Robotic Process Automation with Automation Anywhere 11.0.0.1 JR60077 IBM Robotic Process Automation with Automation Anywhere v11.0.0.2

Workarounds and Mitigations

None

0.0004 Low

EPSS

Percentile

12.7%

Related for 96191A49B3F02AC5AE321682CD42E4B28EA4FCE364975BA965D6276AB96661F8