CVE-2022-22506 — Sensitive Information Exposure in IBM Robotic Process Automation

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.6MEDIUMNVD
EPSS
0.0%
top 89.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Robotic Process Automation
Timeline
PublishedFeb 12

Description

IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants. IBM X-Force ID: 227293.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 0.9 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
IBM Robotic Process Automation information disclosure↗2024-02-12
▶
GHSA
GHSA-qf63-rfv8-f92j: IBM Robotic Process Automation 21↗2024-02-12
▶
CVE-2022-22506 — Sensitive Information Exposure in IBM | cvebase