CVE-2022-38710

published 2022-11-03

CVE-2022-38710: IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attacks against the system. IBM X-Force ID: 234292.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	robotic_process_automation	< 21.0.3	21.0.3
ibm	robotic_process_automation	—	—
ibm	robotic_process_automation_as_a_service	< 21.0.3	21.0.3
ibm	robotic_process_automation_for_cloud_pak	< 21.0.3	21.0.3

CWE-497 CWE-312 CWE-200 CWE-319