CVE-2023-38732: IBM Robotic Process Automation information disclosure
First published: Mon Aug 21 2023(Updated: )
IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289.
Credit: psirt@us.ibm.com psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Robotic Process Automation | >=21.0.0<=21.0.7 | |
| IBM Robotic Process Automation for Cloud Pak | >=21.0.0<=21.0.7 | |
| Redhat Openshift | ||
| Microsoft Windows | ||
| <=21.0.0 - 21.0.7 | ||
| <=21.0.0 - 21.0.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM Robotic Process Automation server vulnerability?
The vulnerability ID for this IBM Robotic Process Automation server vulnerability is CVE-2023-38732.
What is the severity of CVE-2023-38732 vulnerability?
The severity of CVE-2023-38732 vulnerability is medium with a severity value of 4.3.
What is the affected software for this vulnerability?
The affected software for this vulnerability includes IBM Robotic Process Automation server versions 21.0.0 through 21.0.7, IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7, and IBM Robotic Process Automation versions 21.0.0 through 21.0.7.
How can an authenticated user exploit this vulnerability?
An authenticated user can exploit this vulnerability to view sensitive information from application logs.
How can I fix this vulnerability?
To fix this vulnerability, update your IBM Robotic Process Automation server to version 21.0.8 or higher.
- agent/references
- agent/author
- agent/type
- agent/first-publish-date
- collector/nvd-api
- agent/software-canonical-lookup-request
- agent/weakness
- agent/remedy
- agent/description
- agent/severity
- agent/title
- agent/softwarecombine
- agent/event
- collector/ibm-support
- source/IBM
- collector/nvd-index
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- vendor/ibm
- canonical/ibm robotic process automation
- version/ibm robotic process automation/21.0.0
- version/ibm robotic process automation/21.0.7
- canonical/ibm robotic process automation for cloud pak
- version/ibm robotic process automation for cloud pak/21.0.0
- version/ibm robotic process automation for cloud pak/21.0.7
- vendor/redhat
- canonical/redhat openshift
- vendor/microsoft
- canonical/microsoft windows
- version/ibm robotic process automation/21.0.0 - 21.0.7
- version/ibm robotic process automation for cloud pak/21.0.0 - 21.0.7