Security Bulletin: IBM Robotic Process Automation is vulnerable to cross tenant information exposure (CVE-2022-22506)

Summary Security Bulletin: IBM Robotic Process Automation is vulnerable to cross tenant information disclosure CVE-2022-22506 Vulnerability Details CVEID:CVE-2022-22506 DESCRIPTION: IBM Robotic Process Automation contains a vulnerability that could allow user ids may be exposed across tenants. CV...

CVE-2022-22506

CVE-2022-22506 affects IBM Robotic Process Automation (RPA) 21.0.2 (and related deploys). The vulnerability could allow user IDs to be exposed across tenants, impacting confidentiality. The IBM Security Bulletin lists affected products/versions and provides remediation: upgrade to 21.0.2 IF002 or...