CVE-2022-43844: falha de alta gravidade em IBM Robotic Process Automation for Cloud Pak
IBM Robotic Process Automation for Cloud Pak session fixation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.7%
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
IBM · Robotic Process Automation for Cloud PakCVEs relacionadas — IBM Robotic Process Automation for Cloud Pak
No mesmo produto, das mais perigosas para as menos.
CVE-2023-45189MEDIUMIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2023-23476LOWIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2023-38718LOWIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2023-22594MEDIUMIBM Robotic Process Automation for Cloud Pak cross-site scriptingEPSS 0.4%CVE-2024-49824MEDIUMIBM Robotic Process Automation security bypassEPSS 0.3%CVE-2024-49825MEDIUMIBM Robotic Process Automation session fixationEPSS 0.2%