CVE-2023-23476: IBM Robotic Process Automation information disclosure
First published: Tue Aug 01 2023(Updated: )
IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insufficient authorization validation on some API routes. IBM X-Force ID: 245425.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Robotic Process Automation | >=21.0.0<23.0.0 | |
| IBM Robotic Process Automation for Cloud Pak | >=21.0.0<23.0.0 | |
| IBM Robotic Process Automation | <=21.0.0-21.0.7.latest | |
| IBM Robotic Process Automation for Cloud Pak | <=21.0.0-21.0.7.latest |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-23476?
The severity of CVE-2023-23476 is medium (6.5).
How does CVE-2023-23476 impact IBM Robotic Process Automation?
CVE-2023-23476 allows unauthorized access to data due to insufficient authorization validation on some API routes in IBM Robotic Process Automation 21.0.0 through 21.0.7.latest.
Is IBM Robotic Process Automation affected by CVE-2023-23476?
Yes, IBM Robotic Process Automation versions 21.0.0 through 21.0.7.latest are affected by CVE-2023-23476.
What can be done to fix CVE-2023-23476 in IBM Robotic Process Automation?
To fix CVE-2023-23476 in IBM Robotic Process Automation, apply the necessary security updates provided by IBM.
Where can I find more information about CVE-2023-23476?
You can find more information about CVE-2023-23476 on the IBM X-Force ID: 245425.
- collector/nvd-latest
- agent/references
- agent/author
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/description
- agent/severity
- agent/title
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/ibm
- canonical/ibm robotic process automation
- version/ibm robotic process automation/21.0.0
- canonical/ibm robotic process automation for cloud pak
- version/ibm robotic process automation for cloud pak/21.0.0
- version/ibm robotic process automation/21.0.0-21.0.7.latest
- version/ibm robotic process automation for cloud pak/21.0.0-21.0.7.latest