PT-2018-14638 · Automation Anywhere+1 · Automation Anywhere+1

Publicado 2018-11-02 · Atualizado 2019-10-09 · CVE-2018-1877

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11

Description The issue allows highly sensitive information, such as unencrypted passwords, to be stored and made available to a local user.

Recommendations For IBM Robotic Process Automation with Automation Anywhere version 11, consider encrypting sensitive information, such as passwords, to prevent unauthorized access. As a temporary workaround, restrict local user access to sensitive data until a more permanent solution is implemented.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2018-1877

Produtos afetados

Automation Anywhere

Ibm Robotic Process Automation

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-1877 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/151713 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1877 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=ibm10735973 · Aviso do Fabricante