PT-2023-3555 · Ibm · Ibm Robotic Process Automation
Rahul Singh Thakur
+1
·
Publicado
2023-06-20
·
Atualizado
2023-07-26
·
CVE-2023-35901
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6
IBM Robotic Process Automation versions 23.0.0 through 23.0.6
Description
The issue is related to weaknesses in the authentication procedure of the software. Exploitation of this issue could allow a remote attacker to read, modify, or delete data. It is also associated with a client-side validation bypass, which could enable invalid changes or values in certain fields.
Recommendations
For versions 21.0.0 through 21.0.7.6, update to a version outside of this range to resolve the issue.
For versions 23.0.0 through 23.0.6, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider restricting access to sensitive data and fields to minimize the risk of exploitation.
Correção
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Robotic Process Automation