CVE-2018-2006

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to upload arbitrary files to the system. IBM X-Force ID: 155008...

CVE-2018-2006

CVE-2018-2006 affects IBM Robotic Process Automation with Automation Anywhere (AA) 11.0. It is a directory traversal vulnerability where a remote attacker can craft a URL with dot-dot sequences (../) to traverse the filesystem and upload arbitrary files. The CVSS evidence indicates network access...