PT-2022-23205 · Blue Prism · Blue Prism Enterprise

Published 2022-08-25 · Updated 2023-08-08 · CVE-2022-36117

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Blue Prism Enterprise versions 6.0 through 7.01

Description The issue allows an authenticated user to reverse engineer the software and bypass access controls for an administrative function in a misconfigured environment where the Blue Prism Application server is exposed. If credential access is configured to be accessible by a machine or the runtime resource security group, an attacker can spoof a known machine and request known encrypted credentials to decrypt later.

Recommendations For Blue Prism Enterprise versions 6.0 through 7.01, consider restricting access to the administrative function and ensure proper configuration of the environment to prevent exposure of the Blue Prism Application server. As a temporary workaround, restrict the accessibility of credential access to prevent attackers from spoofing known machines and requesting encrypted credentials.

Fix

Related Identifiers

CVE-2022-36117

Affected Products

Blue Prism Enterprise

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-36117 · Security Note
• https://portal.blueprism.com/security-vulnerabilities-august-2022 · Vendor Advisory
• https://community.blueprism.com/discussion/security-vulnerability-notification-ssc-blue-prism-enterprise · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36117 · Vendor Advisory
• https://blueprism.com · Note