PT-2019-17039 · Automation Anywhere+1 · Automation Anywhere+1

Published 2019-07-01 · Updated 2022-12-06 · CVE-2019-4337

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation with Automation Anywhere version 11

Description The issue is related to missing authentication in Ignite nodes, which could allow an attacker to obtain sensitive information.

Recommendations For IBM Robotic Process Automation with Automation Anywhere version 11, consider implementing proper authentication mechanisms for Ignite nodes to prevent unauthorized access.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-4337

Affected Products

Automation Anywhere

Ibm Robotic Process Automation

References · 5

• http://ibm.com/support/docview.wss?uid=ibm10884850 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/161412 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-4337 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-4337 · Security Note
• https://t.me/malwr/1578 · Telegram Post