CVE-2023-22593: IBM Robotic Process Automation for Cloud Pak security configuration
IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges. IBM X-Force ID: 244074.
Other sources
IBM Robotic Process Automation for Cloud Pak is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this security misconfiguration?
The vulnerability ID for this security misconfiguration is CVE-2023-22593.
What is the affected software for this vulnerability?
The affected software for this vulnerability is IBM Robotic Process Automation for Cloud Pak versions 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3.
What is the severity of CVE-2023-22593?
The severity of CVE-2023-22593 is high with a CVSS score of 7.8.
How can this vulnerability be exploited?
This vulnerability can be exploited by misconfiguring the Redis container, which may provide elevated privileges.
How can I fix CVE-2023-22593?
To fix CVE-2023-22593, update IBM Robotic Process Automation for Cloud Pak to versions 21.0.7.4 or 23.0.4.