CVE-2023-22863CWE-319

IBM Robotic Process Automation information disclosure

Medium · published January 18, 2023

CVSS v3.1
5.9
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 244109.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-01-18T18:46Z
EPSS history
Timeline
  • 18 JAN 18:46Z
    IBM Robotic Process Automation information disclosure
    cvelistv5