Security Bulletin: A vulnerability in axios affects IBM Robotic Process Automation and may result in cross-site request forgery (CVE-2023-45857).

Summary axios is used by IBM Robotic Process Automation as part of control center CVE-2023-45857. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTION: Axios is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By inserting the X-XSRF-TOKEN header...

Security Bulletin: A vulnerability in GNU Binutils may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service (CVE-2019-9074).

Summary GNU Binutils is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. CVE-2019-9074. Vulnerability Details CVEID:CVE-2019-9074 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c i...

Security Bulletin: Vulnerabilities in Watson NLP and WebSphere Liberty may affect IBM Robotic Process Automation for Cloud Pak

Summary Python is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP and WebSphere Liberty. CVE-2022-48565. GNU gdb is used by IBM Robotic Process Automation for Cloud Pak as part of WebSphere Liberty and base container images. CVE-2023-39129. Vulnerability Details...

Security Bulletin: Multiple security vulnerabilities in Java may affect IBM Robotic Process Automation

Summary java is used by IBM Robotic Process Automation as part of metrics and licening, and UMS. CVE-2023-22081, CVE-2023-22067, CVE-2023-5676. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow a remote attack...

Security Bulletin: A vulnerability in WebSphere Liberty may affect IBM Robotic Process Automation and result in weaker than expected security (CVE-2023-46158).

Summary WebSphere Liberty is used by IBM Robotic Process Automation as part of UMS and Micro Services CVE-2023-46158. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to...

Security Bulletin: A vulnerability in Microsoft Azure Identity SDK may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution. (CVE-2023-36414).

Summary There is a vulnerability in Microsoft Azure Identity SDK used by IBM Robotic Process Automation as part of API configuration. An attacker could exploit this vulnerability to execute arbitrary code on the system, caused by an integer overflow. CVE-2020-36414. Vulnerability Details...

Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker sending invalid emails. (CVE-2023-27043).

Summary There is a vulnerability in Python used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. An attacker could exploit this vulnerability to send messages from e-mail addresses that would otherwise be rejected. CVE-2020-23064. This bulletin identifies the security fixes ...

Security Bulletin: A vulnerability in SciPy may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service. (CVE-2023-25399).

Summary There is a vulnerability in SciPy used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP, which may result in a denial of serviceCVE-20230-25399. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:...

Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation and result in a remote attacker bypassing security restrictions (CVE-2023-24329).

Summary There is a vulnerability in Python used by IBM Robotic Process Automation as part of Watson NLP and base container images which may result in a remote attacker to bypass security restriction CVE-2023-24329. Vulnerability Details CVEID: CVE-2023-24329 DESCRIPTION: Python could allow a remo...

Security Bulletin: A vulnerability in Red Hat Enterprise Linux may affect IBM Robotic Process Automation for Cloud Pak and result in elevated privileges (CVE-2023-3899).

Summary Red Hat Enterprise Linux is used by IBM Robotic Process Automation for Cloud Pak as part of it's base container images. CVE-2023-3899. Vulnerability Details CVEID: CVE-2023-3899 DESCRIPTION: Red Hat Enterprise Linux could allow a local authenticated attacker to gain elevated privileges on...

CVE-2023-45189

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically...

Default credentials

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically...

CVE-2023-45189 IBM Robotic Process Automation information disclosure

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically...

CVE-2023-45189 IBM Robotic Process Automation information disclosure

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically...

Security Bulletin: Multiple security vulnerabilities in Go may affect IBM Robotic Process Automation for Cloud Pak

Summary Golang Go is used by IBM Robotic Process Automation for Cloud Pak as part of the operator CVE-2023-29406, CVE-2023-29409. libp2p go-libp2p is used by IBM Robotic Process Automation for Cloud Pak as part of the operator CVE-2023-39533. Vulnerability Details CVEID: CVE-2023-29406 DESCRIPTIO...

PT-2023-29450 · Ibm · Ibm Robotic Process Automation For Cloud Pak +1

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7.10 IBM Robotic Process Automation versions 23.0.0 through 23.0.10 IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.10 IBM Robotic Process Automation for...

Security Bulletin: A vulnerability in jquery may affect IBM Robotic Process Automation for Cloud Pak and result in an attacker obtaining sensitive information. (CVE-2020-23064)

Summary There is a vulnerability in jQuery used by IBM Robotic Process Automation for Cloud Pak as part of the operator, which may result in cross site scripting CVE-2020-23064. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:...

Security Bulletin: A vulnerability in IBM Robotic Process Automation may result in access to client vault credentials (CVE-2023-45189).

Summary A vulnerability in IBM Robotic Process Automation may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. Vulnerability Details CVEID: CVE-2023-45189 DESCRIPTION: A...

CVE-2023-43058 IBM Robotic Process Automation privilege escalation

IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects. IBM X-Force ID: 247527...

Security Bulletin: IBM Robotic Process Automation is vulnerable to privilege escalation that affects ownership of project (CVE-2023-43058).

Summary IBM Robotic Process Automation server is vulnerable to privilege escalation that affects ownership of projects CVE-2023-43058. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2023-43058 DESCRIPTION: IBM Robotic Process...