Description
IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Robotic Process Automation | 21.0.1 – < 21.0.7, 23.0.0 – < 23.0.1 | 21.0.7 |
References
- https://www.ibm.com/support/pages/node/6962175 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/243710 vdb-entry