CVE-2023-45189CWE-200

IBM Robotic Process Automation information disclosure

Medium · published November 3, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. IBM X-Force ID: 268752.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-11-03T22:51Z
EPSS history
Timeline
  • 03 NOV 22:51Z
    IBM Robotic Process Automation information disclosure
    cvelistv5