PT-2022-26976 · Ibm · Ibm Robotic Process Automation

Published 2022-11-03 · Updated 2025-05-02 · CVE-2022-43574

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation versions 21.0.1 through 21.0.5

Description The issue is related to incorrect permission assignment, which could allow access to application configurations.

Recommendations For IBM Robotic Process Automation versions 21.0.1 through 21.0.5, update to a version that includes the correct permission assignment fix.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-43574

Affected Products

Ibm Robotic Process Automation

References · 5

• https://ibm.com/support/pages/node/6831645 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43574 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43574 · Vendor Advisory
• https://t.me/cvenotify/120694 · Telegram Post
• https://t.me/cibsecurity/52540 · Telegram Post