CVE-2023-35900

published 2023-07-19

CVE-2023-35900: IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may…

medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
ibm	robotic_process_automation	<= 21.0.7.4	—
ibm	robotic_process_automation	21.0.0 – 21.0.7.4	—
ibm	robotic_process_automation	23.0.0 – 23.0.5	—
ibm	robotic_process_automation_as_a_service	<= 21.0.7.4	—
ibm	robotic_process_automation_as_a_service	23.0.0 – 23.0.5	—
ibm	robotic_process_automation_for_cloud_pak	<= 21.0.7.4	—
ibm	robotic_process_automation_for_cloud_pak	23.0.0 – 23.0.5	—

CWE-200