CVE-2024-51456

IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks...

Security Bulletin: A vulnerability in IBM Robotic Process Autmation could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks (CVE-2024-51456).

Summary A vulnerability in IBM Robotic Process Autmation could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks. This bulletin identifies the fixes or remediations available to resolve this vulnerability. Vulnerability Details...

CVE-2024-51456

IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks...

CVE-2024-51456

creationtimestamp| type| source ---|---|--- 2025-01-12 13:32:03+00:00| seen| https://infosec.exchange/users/cve/statuses/113815632168521609 2025-01-12 14:04:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1339 2025-01-12 14:15:29+00:00| seen|...

CVE-2024-51456

CVE-2024-51456 affects IBM Robotic Process Automation (Cloud Pak, and standard RPA) versions 21.0.0–21.0.7.19 and 23.0.0–23.0.19. Root cause involves RSA usage without OAEP (CWE-780). Impact: remote attacker could obtain sensitive data exposed through crypto-analytic conditions. Remediation: upgr...