Security feature bypass

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500...

PT-2023-5442 · Ibm · Ibm Robotic Process Automation For Cloud Pak

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation for Cloud Pak versions 21.0.1 through 21.0.7.3 IBM Robotic Process Automation for Cloud Pak versions 23.0.0 through 23.0.3 Description: The issue is related to security misconfiguration of the Redis container,...

Security Bulletin: IBM Robotic Process Automation for Cloud Pak is vulnerable to insufficient security configuration (CVE-2023-23468).

Summary IBM Robotic Process Automation for Cloud Pak is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster CVE-2023-23468. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

Remote code execution

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

CVE-2023-31902: Undefined Security Weakness

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

PT-2023-23507 · Pax Technology · Rpa Technology Mobile Mouse

Name of the Vulnerable Software and Affected Versions: RPA Technology Mobile Mouse version 3.6.0.4 Description: The issue concerns Remote Code Execution RCE, allowing for potential code execution on affected devices. Recommendations: For RPA Technology Mobile Mouse version 3.6.0.4, at the moment,...

CVE-2023-31902

The CVE-2023-31902 entry concerns RPA Technology Mobile Mouse 3.6.0.4 with a Remote Code Execution (RCE) vulnerability. Affected item: Mobile Mouse Server component used by the device; root cause involves a vulnerability exploitable over the network, allowing code execution without user interacti...

CVE-2023-31902

RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution RCE...

RPA Technology Mobile Mouse 安全漏洞

RPA Technology Mobile Mouse is a wireless mouse from RPA Technology. A security vulnerability exists in RPA Technology Mobile Mouse version 3.6.0.4, which originates from the presence of a Remote Code Execution RCE vulnerability...

Security Bulletin: Multiple vulnerabilies in Java affect IBM Robotic Process Automation for Cloud Pak which may result in a denial of service (CVE-2023-21830, CVE-2023-21835, CVE-2023-21843)

Summary There are vulnerabilities in Java used by IBM Robotic Process Automation which may result in a denial of service. Java is used by IBM Robotic Process Automation for Cloud Pak as part of container images. This bulletin identifies the security fixes to apply to address this vulnerability...

CVE-2023-22591

IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710...

Code injection

IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032...

CVE-2023-22591

CVE-2023-22591 affects IBM Robotic Process Automation versions 21.0.1–21.0.7 and 23.0.0–23.0.1. Root cause: session tokens are not invalidated after a password reset, potentially enabling an attacker with physical access to gain access to the system. Exploitation status is not provided in the sup...

CVE-2022-46773 IBM Robotic Process Automation security bypass

IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951...

CVE-2022-46773

IBM Robotic Process Automation (IBM RPA) versions 21.0.0–21.0.7 and 23.0.0 are affected by a client-side validation bypass in credential pools, which may allow creation of invalid credential pools. The issue’s root cause is client-side validation bypass for credential pools; impact is potential m...

K52401347: Linux kernel vulnerability CVE-2021-28972

Security Advisory Description In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly...

SUSE CVE-2021-28972

In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because...