High · 8.8 CVE-2022-43844 EUVD-2022-46814GHSA-4m8g-qfmv-jcqg

IBM Robotic Process Automation for Cloud Pak session fixation

Published Jan 5, 2023 · Updated Apr 10, 2025 · Assigned by ibm

Vendor: IBM Product: Robotic Process Automation for Cloud Pak

Description

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.

Affected products

Vendor	Product	Affected	Fixed
IBM	Robotic Process Automation for Cloud Pak	20.12 – < 21.0.3	21.0.3

References

https://www.ibm.com/support/pages/node/6852663 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239081 vdb-entry