PT-2018-14638 · Automation Anywhere+1 · Automation Anywhere+1

Published 2018-11-02 · Updated 2019-10-09 · CVE-2018-1877

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11

Description The issue allows highly sensitive information, such as unencrypted passwords, to be stored and made available to a local user.

Recommendations For IBM Robotic Process Automation with Automation Anywhere version 11, consider encrypting sensitive information, such as passwords, to prevent unauthorized access. As a temporary workaround, restrict local user access to sensitive data until a more permanent solution is implemented.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2018-1877

Affected Products

Automation Anywhere

Ibm Robotic Process Automation

References · 4

• https://osv.dev/vulnerability/CVE-2018-1877 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/151713 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1877 · Security Note
• http://ibm.com/support/docview.wss?uid=ibm10735973 · Vendor Advisory