CVE-2023-38734

IBM Robotic Process Automation privilege escalation

Medium · published August 22, 2023

CVSS v3.1
6.6
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00697 · 52.5th percentile
Published
2023-08-22T21:18Z
EPSS history
Timeline
  • 22 AUG 21:18Z
    IBM Robotic Process Automation privilege escalation
    cvelistv5