IBM Robotic Process Automation 代码问题漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A code issue vulnerability exists in IBM Robotic Process Automation versions...

PT-2023-20240 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.1 through 21.0.5 Description: The issue is related to insufficient protection of credentials. Specifically, Queue Provider credentials are not obfuscated while editing queue provider details...

IBM Robotic Process Automation 信息泄露漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. An information disclosure vulnerability exists in IBM Robotic Process Automati...

Security Bulletin: IBM Robotic Process Automation for Cloud Pak may be vulnerable to a denial of service due to ISC BIND (CVE-2022-38177, CVE-2022-38178).

Summary ISC BIND is used by IBM Robotic Process Automation for Cloud Pak as part of it's Antivirus and Watson NLP container images. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:CVE-2022-38177 DESCRIPTION: ISC BIND is vulnerable to...

Security Bulletin: A vulnerability in Microsoft .NET Framework may affect IBM Robotic Process Automation and result in an exposure of sensitive information (CVE-2022-41064)

Summary There is a vulnerability in .NET Framework components used by IBM Robotic Process Automation as part of it's infrastructure, which may allow a remote authenticated attacker to obtain sensitive information. CVE-2022-41064. This bulletin identifies the security fixes to apply to address thi...

Security Bulletin: A vulnerability exists in IBM Robotic Process Automation where Queue Provider credentials are not obfuscated during editing (CVE-2023-25680)

Summary There is a vulnerability in IBM Robotic Process Automation where Queue Provider credentials are not obfuscated while editing. CVE-2023-25680. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:CVE-2023-25680 DESCRIPTION: IBM...

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Angular is part of the .NET RHEL infrastructure CVE-2021-4231. Apache UIMA is used by IBM Robotic Process Automation as part of Watson NLP CVE-2022-32287. SnakeYaml is used by IBM Robotic Process...

Security Bulletin: A denial of service in Microsoft .NET may affect IBM Robotic Process Automation for Cloud Pak (CVE-2023-21538)

Summary There is a vulnerability in .NET used by IBM Robotic Process Automation as part of it's infrastructure, which may result in a denial of service CVE-2023-21538. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:CVE-2023-21538...

Security Bulletin: A vulnerability exists in IBM Robotic Process Automation where Queue Provider credentials are not obfuscated during editing (CVE-2023-25680)

Summary There is a vulnerability in IBM Robotic Process Automation where Queue Provider credentials are not obfuscated while editing. CVE-2023-25680. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:CVE-2023-25680 DESCRIPTION: IBM...

Security Bulletin: IBM Robotic Process Automation is vulnerable to session tokens not being invalidated after password reset.

Summary IBM Robotic Process Automation session tokes are not invalidated after a password reset. IBM X-Force ID: 243710. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details IBM X-Force ID: 243710 DESCRIPTION: IBM Robotic Process Automation cou...

Security Bulletin: A vulnerability in IBM Robotic Process Automation may allow a user to create invalid credential pools (CVE-2022-46773)

Summary There is a vulnerability in IBM Robotic Process Automation which may allow an authenticated user to create invalid credential pools. CVE-2022-46773. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:CVE-2022-46773 DESCRIPTION:...

Security Bulletin: IBM Robotic Process Automation is vulnerable to Cross-Site Scripting.

Summary IBM Robotic Process Automation for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerabili...

The vulnerability of the IBM Robotic Process Automation software lies in its insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the IBM Robotic Process Automation software configuration allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the IBM Robotic Process Automation software configuration is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

The vulnerability of the IBM Robotic Process Automation software lies in errors in the user interface’s information representation, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the IBM Robotic Process Automation software is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially create...

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Node.js follow-redirects is used by IBM Robotic Process Automation as part of API Server functionality CVE-2022-0536. Madialize URI.js module for NPM is used by IBM Robotic Process Automation as par...

IBM Robotic Process Automation has an unspecified vulnerability (CNVD-2023-05471)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM, Inc. can help you automate more business and IT processes at scale with the ease and speed of traditional RPA.IBM Robotic Process Automation for IBM Cloud Pak has a security...

IBM Robotic Process Automation Information Disclosure Vulnerability (CNVD-2023-05407)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM, Inc. IBM Robotic Process Automation has a security vulnerability that could be exploited by remote attackers to submit special requests that could obtain sensitive information...

Security Bulletin: Vulnerabilities in the protobuf-java may affect IBM Robotic Process Automation and could result in a denial of service (CVE-2022-3171, CVE-2022-3509)

Summary There is a vulnerability in protobuf-java used by IBM WebSphere Liberty which may result in a denial of service. IBM Robotic Process Automation for Cloud Pak uses IBM WebSphere Liberty as part of it's User Management Services. This bulletin identifies the security fixes to apply to addres...

Security Bulletin: Multiple Security vulnerabilities in Java may affect IBM Robotic Process Automation for Cloud Pak (CVE-2022-21618, CVE-2022-21619, CVE-2022-21624, CVE-2022-21626, CVE-2022-21628, CVE-2022-39399)

Summary There are multiple security vulnerabilities in the Java used by IBM Robotic Process Automation as part of the it's infrastructure, license management, NLP, and UMS capability. This bulletin identifies the security fixes to apply to address the vulnerabilities. Vulnerability Details...