CVE-2022-46773: IBM Robotic Process Automation security bypass

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/242951
• https://www.ibm.com/support/pages/node/6962155 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6962155

Frequently Asked Questions

• What is the vulnerability ID for this IBM Robotic Process Automation vulnerability?

  The vulnerability ID for this IBM Robotic Process Automation vulnerability is CVE-2022-46773.

• What is the severity level of the IBM Robotic Process Automation vulnerability (CVE-2022-46773)?

  The severity level of the IBM Robotic Process Automation vulnerability (CVE-2022-46773) is medium.

• Which versions of IBM Robotic Process Automation are affected by the vulnerability (CVE-2022-46773)?

  IBM Robotic Process Automation versions 21.0.0 - 21.0.7 and 23.0.0 are affected by the vulnerability (CVE-2022-46773).

• How can the vulnerability (CVE-2022-46773) be exploited?

  The vulnerability (CVE-2022-46773) can be exploited through client-side validation bypass for credential pools, allowing the creation of invalid credential pools.

• Is there a fix available for the IBM Robotic Process Automation vulnerability (CVE-2022-46773)?

  Yes, IBM has provided a fix for the IBM Robotic Process Automation vulnerability (CVE-2022-46773). Please refer to the IBM support pages for more information.