PT-2023-5436 · Ibm · Ibm Robotic Process Automation

Michael Stuy · Publicado 2023-08-22 · Atualizado 2023-08-26 · CVE-2023-38733

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 IBM Robotic Process Automation versions 23.0.0 through 23.0.1

Description The issue is related to insufficient protection of registration data in IBM Robotic Process Automation, allowing an authenticated user to view sensitive information from installation logs. This could potentially enable a remote attacker to access protected information.

Recommendations For versions 21.0.0 through 21.0.7.1, update to a version outside of this range to mitigate the risk. For versions 23.0.0 through 23.0.1, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to installation logs to minimize the risk of exploitation.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

BDU:2023-06066

CVE-2023-38733

Produtos afetados

Ibm Robotic Process Automation

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-38733 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-06066 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-38733 · Aviso do Fabricante
• https://ibm.com/support/pages/node/7028223 · Aviso do Fabricante
• https://t.me/cvenotify/57116 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/262293 · Aviso do Fabricante
• https://t.me/cibsecurity/69040 · Publicação no Telegram