CVE-2023-38734 IBM Robotic Process Automation privilege escalation

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481...

CVE-2023-38734 IBM Robotic Process Automation privilege escalation

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481...

CVE-2023-38734

IBM Robotic Process Automation is vulnerable to incorrect privilege assignment when importing users from an LDAP directory in versions 21.0.0–21.0.7.1 and 23.0.0–23.0.1. Root cause is an LDAP-import privilege issue; impact includes elevated access controls affecting confidentiality, integrity, an...

CVE-2023-38732

IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289...

CVE-2023-38732

IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289...

Code injection

IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289...

CVE-2023-38732

IBM Robotic Process Automation 21.0.0–21.0.7 server is affected by an information-disclosure vulnerability where an authenticated user can view sensitive data in application logs. The issue is described across multiple sources (IBM X-Force ID 262289; RH and CNVD entries) but the provided document...

CVE-2023-38732 IBM Robotic Process Automation information disclosure

IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289...

CVE-2023-38732 IBM Robotic Process Automation information disclosure

IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289...

Security Bulletin: Multiple security vulnerabilities in .NET may affect IBM Robotic Process Automation for Cloud Pak (CVE-2023-24936, CVE-2023-29337, CVE-2023-33128)

Summary Microsoft .NET is used by IBM Robotic Process Automation for Cloud Pak as the development infrastructure and application runtime. CVE-2023-24936, CVE-2023-29337, CVE-2023-33128 Vulnerability Details CVEID:CVE-2023-24936 DESCRIPTION: Microsoft .NET and Visual Studio could allow a remote...

IBM Robotic Process Automation 日志信息泄露漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation versions...

PT-2023-5436 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 IBM Robotic Process Automation versions 23.0.0 through 23.0.1 Description: The issue is related to insufficient protection of registration data in IBM Robotic Process Automation,...

IBM Robotic Process Automation 日志信息泄露漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. can help you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation that stems...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation versions...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation versions 21.0.0...

Security Bulletin: A vulnerability in urlib3 affects IBM Robotic Process Automation for Cloud Pak which may result in CRLF injection (CVE-2020-26137).

Summary urlib3 is used by IBM Robotic Process Automation for Cloud Pak as part of OCR and AntiVirus container images. CVE-2020-26137 Vulnerability Details CVEID:CVE-2020-26137 DESCRIPTION: urllib3 is vulnerable to CRLF injection. By inserting CR and LF control characters in the first argument of...

Security Bulletin: IBM Robotic Process Automation is vulnerable to sensitive information disclosure in installation logs (CVE-2023-38733)

Summary IBM Robotic Process Automation server could allow an authenticated user to view sensitive information from installation logs. Authenticated users are able to view database connection strings in the IBM Robotic Process Automation installation logs. Vulnerability Details CVEID:CVE-2023-3873...

Security Bulletin: IBM Robotic Process Automation is vulnerable to information disclosure of script content (CVE-2023-40370)

Summary IBM Robotic Process Automation runtime is vulnerable to information disclosure of script content if the remote REST request computer policy is enabled. Vulnerability Details CVEID:CVE-2023-40370 DESCRIPTION: IBM Robotic Process Automation runtime is vulnerable to information disclosure of...

Security Bulletin: A security vulnerability in Microsoft.NET affects IBM Robotic Process Automation and may result in a denial of service (CVE-2023-29331).

Summary IBM Robotic Process Automation in developed using Microsoft .NET CVE-2023-29331. Vulnerability Details CVEID:CVE-2023-29331 DESCRIPTION: Microsoft .NET is vulnerable to a denial of service. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause...

IBM Robotic Process Automation License Issue Vulnerability (CNVD-2023-68780)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. can help you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an authorization issue vulnerabili...