High · 7.7 CVE-2019-4298 EUVD-2019-13905GHSA-455c-2fpr-g47j

IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could allow …

Published Jul 1, 2019 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Robotic Process Automation with Automation Anywhere

Description

IBM Robotic Process Automation with Automation Anywhere 11 uses a high privileged PostgreSQL account for database access which could allow a local user to perform actions they should not have privileges to execute. IBM X-Force ID: 160764.

Affected products

Vendor	Product	Affected	Fixed
IBM	Robotic Process Automation with Automation Anywhere	11	—

References

http://www.ibm.com/support/docview.wss?uid=ibm10884820
ibm-rpa-cve20194298-priv-escalation (160764) vdb-entry