Security Bulletin: IBM Robotic Process Automation is vulnerable to man in the middle attacks through manipulation of client proxy (CVE-2022-36774)

Summary IBM Robotic Process automation is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. Vulnerability Details CVEID:CVE-2022-36774 DESCRIPTION: IBM Robotic Process automation is vulnerable to man in the middle attacks through manipulation of the...

Exploit for CVE-2024-0311

CVE-2024-0311 ? This is a PoC for what I believe is CVE-...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0312

CVE-2024-0312 affects Skyhigh Client Proxy. Multiple sources confirm a vulnerability that allows a malicious insider to uninstall the proxy without a valid uninstall password. CNNVD specifies Skyhigh Client Proxy vulnerable versions up to 4.8.1 and earlier; other documents do not specify a fix. T...

CVE-2024-0312

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0311

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

CVE-2024-0311

CVE-2024-0311 affects Skyhigh Client Proxy on Windows, where a malicious insider can bypass the product’s policy without a valid release code. Connected sources describe a bypass via a named pipe MCPTrayPipe0 (CreateNamedPipeW) and related access-control weaknesses, enabling abuse of SCPBypass.ex...

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from a vulnerability that allows an attacker to uninstall the proxy without a valid uninstall password...

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client-side proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from an existing policy that allows an attacker to bypass the proxy...

Skyhigh Client Proxy Security Vulnerability

Skyhigh Client Proxy is a client proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from the presence of a control flow implementation error issue that allows an attacker to circumvent existing security controls...

PT-2024-15461 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Recommendations: At the moment, there is no information about a newer...

CVE-2024-0311: Improper Validation of Function Hook Arguments

A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...

PT-2024-15462 · Mcafee · Skyhigh Client Proxy

Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...

CVE-2024-0312: Improper Validation of Function Hook Arguments

A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password...

CVE-2022-36774

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...

CVE-2022-36774

IBM Robotic Process Automation (IBM RPA) is affected by CVE-2022-36774 for versions

CVE-2022-36774: Undefined Security Weakness

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...

org.apache.olingo:pojogen-maven-plugin (>=4.0.0, <=4.6.0) potentially affected by CVE-2019-17556 via org.apache.olingo:odata-client-proxy (>=4.0.0, <=4.6.0)

org.apache.olingo:odata-client-proxy MAVEN version =4.0.0, =4.0.0, =4.6.0 Source cves: CVE-2019-17556 Source advisory: GHSA-GJ76-429M-56WC...

org.apache.olingo:pojogen-maven-plugin (>=4.0.0, <=4.6.0) potentially affected by CVE-2019-17556 via org.apache.olingo:odata-client-proxy (>=4.0.0, <=4.6.0)

org.apache.olingo:odata-client-proxy MAVEN version =4.0.0, =4.0.0, =4.6.0 Source cves: CVE-2019-17556 Source advisory: OSV:GHSA-GJ76-429M-56WC...