Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-35280

Опубликовано: 10 авг. 2022
Источник: nvd
CVSS3: 4.6
CVSS3: 9.8
EPSS Низкий

Описание

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 22%
0.0007
Низкий

4.6 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-521

Связанные уязвимости

CVSS3: 9.8
github
около 3 лет назад

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.

EPSS

Процентиль: 22%
0.0007
Низкий

4.6 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-521