CVE-2023-22593: IBM Robotic Process Automation for Cloud Pak security configuration
First published: Wed Jun 21 2023(Updated: )
IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges. IBM X-Force ID: 244074.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Robotic Process Automation for Cloud Pak | <=21.0.1-21.0.7.3, 23.0.0 - 23.0.3 | |
| IBM Robotic Process Automation | >=21.0.1<=21.0.7.3 | |
| IBM Robotic Process Automation | >=23.0.0<=23.0.3 | |
| Redhat Openshift | ||
| All of | ||
| Redhat Openshift | ||
| Any of | ||
| IBM Robotic Process Automation | >=21.0.1<=21.0.7.3 | |
| IBM Robotic Process Automation | >=23.0.0<=23.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security misconfiguration?
The vulnerability ID for this security misconfiguration is CVE-2023-22593.
What is the affected software for this vulnerability?
The affected software for this vulnerability is IBM Robotic Process Automation for Cloud Pak versions 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3.
What is the severity of CVE-2023-22593?
The severity of CVE-2023-22593 is high with a CVSS score of 7.8.
How can this vulnerability be exploited?
This vulnerability can be exploited by misconfiguring the Redis container, which may provide elevated privileges.
How can I fix CVE-2023-22593?
To fix CVE-2023-22593, update IBM Robotic Process Automation for Cloud Pak to versions 21.0.7.4 or 23.0.4.
- agent/references
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/description
- agent/title
- agent/severity
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/tags
- agent/trending
- vendor/ibm
- canonical/ibm robotic process automation for cloud pak
- version/ibm robotic process automation for cloud pak/21.0.1-21.0.7.3, 23.0.0 - 23.0.3
- canonical/ibm robotic process automation
- version/ibm robotic process automation/21.0.1
- version/ibm robotic process automation/21.0.7.3
- version/ibm robotic process automation/23.0.0
- version/ibm robotic process automation/23.0.3
- vendor/redhat
- canonical/redhat openshift