CVE-2023-45189

published 2023-11-03

CVE-2023-45189: A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result…

Priority P3 37 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. IBM X-Force ID: 268752.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	robotic_process_automation	21.0.0 – 21.0.7.10	—
ibm	robotic_process_automation	23.0.0 – 23.0.10	—
ibm	robotic_process_automation_for_cloud_pak	21.0.0 – 21.0.7	—
ibm	robotic_process_automation_for_cloud_pak	23.0.0 – 23.0.10	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200