5.3

CVE-2023-35900

IBM Robotic Process Automation information disclosure

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level.  IBM X-Force ID:  259368.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Robotic Process Automation Version <= 21.0.7.4
   Redhat ≫ Openshift Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Robotic Process Automation Version >= 23.0.0 <= 23.0.5
   Redhat ≫ Openshift Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Robotic Process Automation As A Service Version <= 21.0.7.4
   Redhat ≫ Openshift Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Robotic Process Automation As A Service Version >= 23.0.0 <= 23.0.5
   Redhat ≫ Openshift Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Robotic Process Automation For Cloud Pak Version <= 21.0.7.4
   Redhat ≫ Openshift Version -
   Microsoft ≫ Windows Version -
Ibm ≫ Robotic Process Automation For Cloud Pak Version >= 23.0.0 <= 23.0.5
   Redhat ≫ Openshift Version -
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.398
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
IBM 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://exchange.xforce.ibmcloud.com/vulnerabilities/259368
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/7010895
Patch
Vendor Advisory