PT-2019-17022 · Postgresql+1 · Postgresql+1

Publicado 2019-07-01 · Atualizado 2023-01-31 · CVE-2019-4298

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

S:U/A:N/PR:N/C:H/AC:L/AV:L/I:H/UI:N

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11

Description The issue concerns the use of a high-privileged PostgreSQL account for database access in IBM Robotic Process Automation with Automation Anywhere. This could allow a local user to perform actions they should not have privileges to execute.

Recommendations For IBM Robotic Process Automation with Automation Anywhere version 11, consider restricting access to the PostgreSQL account to minimize the risk of exploitation. As a temporary workaround, review and adjust the database access privileges to ensure they align with the principle of least privilege.

Correção

Identificadores relacionados

CVE-2019-4298

Produtos afetados

Ibm Robotic Process Automation With Automation Anywhere

Postgresql

Referências · 5

• https://osv.dev/vulnerability/CVE-2019-4298 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/160764 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4298 · Nota de Segurança
• https://t.me/cvenotify/43246 · Publicação no Telegram
• http://ibm.com/support/docview.wss?uid=ibm10884820 · Aviso do Fabricante