CVE-2023-25680

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-25680
IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/6962207 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247032 VDB Entry Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*
History

07 Nov 2023, 04:09

Type Values Removed Values Added
Summary IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032. IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.
Information

Published : 2023-03-15 20:15

Updated : 2023-11-07 04:09

NVD link : CVE-2023-25680

Mitre link : CVE-2023-25680

JSON object : View

Products Affected

ibm

  • robotic_process_automation
  • robotic_process_automation_as_a_service
  • robotic_process_automation_for_cloud_pak
CWE
NVD-CWE-noinfo