PT-2019-17038 · Automation Anywhere+1 · Automation Anywhere+1

Publicado 2019-07-01 · Atualizado 2022-12-06 · CVE-2019-4336

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11

Description The issue is related to an inadequate account lockout setting, which could allow a remote attacker to brute force account credentials.

Recommendations For IBM Robotic Process Automation with Automation Anywhere version 11, consider implementing a more robust account lockout policy to prevent brute force attacks.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2019-4336

Produtos afetados

Automation Anywhere

Ibm Robotic Process Automation

Referências · 5

• https://osv.dev/vulnerability/CVE-2019-4336 · Aviso do Fabricante
• http://ibm.com/support/docview.wss?uid=ibm10884848 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4336 · Nota de Segurança
• https://t.me/malwr/1577 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/161411 · Aviso do Fabricante