PT-2022-15358 · Ibm · Ibm Robotic Process Automation

Published 2022-05-09 · Updated 2023-08-08 · CVE-2022-22319

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation version 21.0.1

Description The issue allows a registered user on the system to physically delete a queue, which could cause disruption for any scripts dependent on the queue.

Recommendations For IBM Robotic Process Automation version 21.0.1, restrict access to queue deletion functionality to prevent unauthorized removal of queues that scripts depend on.

Fix

Related Identifiers

CVE-2022-22319

Affected Products

Ibm Robotic Process Automation

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-22319 · Security Note
• https://ibm.com/support/pages/node/6569203 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22319 · Vendor Advisory
• https://ibm.com/support/pages/node/6583547 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/218366 · Vendor Advisory
• https://t.me/cibsecurity/42190 · Telegram Post