CVE-2023-38732: IBM Robotic Process Automation information disclosure
IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force ID: 262289.
Other sources
IBM Robotic Process Automation server could allow an authenticated user to view sensitive information from application logs.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this IBM Robotic Process Automation server vulnerability?
The vulnerability ID for this IBM Robotic Process Automation server vulnerability is CVE-2023-38732.
What is the severity of CVE-2023-38732 vulnerability?
The severity of CVE-2023-38732 vulnerability is medium with a severity value of 4.3.
What is the affected software for this vulnerability?
The affected software for this vulnerability includes IBM Robotic Process Automation server versions 21.0.0 through 21.0.7, IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7, and IBM Robotic Process Automation versions 21.0.0 through 21.0.7.
How can an authenticated user exploit this vulnerability?
An authenticated user can exploit this vulnerability to view sensitive information from application logs.
How can I fix this vulnerability?
To fix this vulnerability, update your IBM Robotic Process Automation server to version 21.0.8 or higher.