PT-2025-2900 · Ibm · Ibm Robotic Process Automation
Published
2025-01-11
·
Updated
2025-03-28
·
CVE-2024-51456
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.19
IBM Robotic Process Automation versions 23.0.0 through 23.0.19
Description
The issue is related to the use of the RSA algorithm without OAEP, which could allow a remote attacker to obtain sensitive data through certain crypto-analytic attacks. This vulnerability may potentially be exploited by attackers to gain access to sensitive information.
Recommendations
For IBM Robotic Process Automation versions 21.0.0 through 21.0.7.19, consider disabling the use of the RSA algorithm without OAEP as a temporary workaround until a patch is available.
For IBM Robotic Process Automation versions 23.0.0 through 23.0.19, consider disabling the use of the RSA algorithm without OAEP as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use of a Broken Cryptographic Algorithm
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ibm Robotic Process Automation