Lucene search
HistorySep 20, 2023 - 8:15 p.m.
CVE-2023-38718
ibm
robotic process automation
sensitive information
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606.
Affected configurations
Node
ibmrobotic_process_automationRange21.0.0–21.0.7.8
ORibmrobotic_process_automationRange23.0.0–23.0.8
Node
ibmrobotic_process_automationRange21.0.0–21.0.7.8cloud_pak
ORibmrobotic_process_automationRange23.0.0–23.0.8cloud_pak
Related
cve
cve
CVE-2023-38718
2023-09-20 20:15:11
prion
prion
Information disclosure
2023-09-20 20:15:00
cvelist
cvelist
CVE-2023-38718 IBM Robotic Process Automation information disclosure
2023-09-20 19:12:24
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
Related for NVD:CVE-2023-38718