Skip to content
OpenAdvisories
Low · 3.1 CVE-2023-23476 EUVD-2023-27576GHSA-rpj7-8p65-2w48

IBM Robotic Process Automation information disclosure

Published Aug 2, 2023 · Updated Oct 11, 2024 · Assigned by ibm

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization validation on some API routes. IBM X-Force ID: 245425.

Affected products

VendorProductAffectedFixed
IBM Robotic Process Automation 21.0.0 – ≤ 21.0.7.latest —
IBM Robotic Process Automation for Cloud Pak 21.0.0 – ≤ 21.0.7.latest —

References