CVE-2022-22334

Опубликовано: 01 авг. 2022

Источник: nvd

CVSS3: 4.2

CVSS3: 4.3

EPSS Низкий

Описание

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/219391
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6608550
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/219391
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6608550
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*

Версия от 21.0.1 (включая) до 21.0.1.7 (исключая)

cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*

Версия от 21.0.2 (включая) до 21.0.2.5 (исключая)

cpe:2.3:a:ibm:robotic_process_automation:21.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00126

Низкий

4.2 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-8m9f-86mh-w32q

CVSS3: 4.3

github

больше 3 лет назад

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of which they should not have access. IBM X-Force ID: 219391.

EPSS

Процентиль: 32%

0.00126

Низкий

4.2 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo