PT-2022-6210 · Ibm · Ibm Robotic Process Automation

Published 2022-10-03 · Updated 2023-08-08 · CVE-2022-36774

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

C:N/I:H/S:U/UI:N/A:N/PR:N/AV:A/AC:L

Name of the Vulnerable Software and Affected Versions IBM Robotic Process Automation versions 21.0.0 through 21.0.2

Description The issue is related to the configuration of IBM Robotic Process Automation, which is vulnerable to man-in-the-middle attacks through manipulation of the client proxy configuration. It is also associated with weaknesses in the authentication procedure, allowing a remote attacker to impact the integrity of protected information.

Recommendations For versions 21.0.0 through 21.0.2, consider restricting access to the client proxy configuration to minimize the risk of exploitation. As a temporary workaround, review and secure the authentication procedure to prevent potential manipulation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2023-00478

CVE-2022-36774

Affected Products

Ibm Robotic Process Automation

References · 6

• https://bdu.fstec.ru/vul/2023-00478 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36774 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/233575 · Vendor Advisory
• https://ibm.com/support/pages/node/6826013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36774 · Security Note
• https://ibm.com/blogs/psirt/security-bulletin-ibm-robotic-process-automation-is-vulnerable-to-man-in-the-middle-attacks-through-manipulation-of-client-proxy-cve-2022-36774 · Note