CVE-2023-22592: IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission…

PriorityP336high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.15%

4.5th percentile

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission settings. IBM X-Force ID: 244073.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	robotic_process_automation_for_cloud_pak	>= 21.0.1 < 21.0.4	21.0.4
ibm	robotic_process_automation_for_cloud_pak	>= 21.0.1 < 21.0.5	21.0.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.