PT-2019-17039 · Automation Anywhere+1 · Automation Anywhere+1

CVE-2019-4337 · Publicado 2019-07-01 · Atualizado 2022-12-06

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11

Description The issue is related to missing authentication in Ignite nodes, which could allow an attacker to obtain sensitive information.

Recommendations For IBM Robotic Process Automation with Automation Anywhere version 11, consider implementing proper authentication mechanisms for Ignite nodes to prevent unauthorized access.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-4337

Produtos afetados

Automation Anywhere

Ibm Robotic Process Automation

Referências · 5

• https://t.me/malwr/1578 · Publicação no Telegram
• http://ibm.com/support/docview.wss?uid=ibm10884850 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/161412 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-4337 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-4337 · Nota de Segurança