Robotic Process Automation For Cloud Pak vulnerabilities
5 known vulnerabilities in Robotic Process Automation For Cloud Pak from IBM. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Robotic Process Automation for Cloud Pak: Incorrect Authorization
IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis container which may provide elevated privileges. IBM X-Force ID: 244074.
- 7.8 High severity
Robotic Process Automation for Cloud Pak: Incorrect Permission Assignment for Critical Resource
IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission settings. IBM X-Force ID: 244073.
- 8.8 High severity
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken…
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.
- 7.5 High severity
IBM Robotic Process Automation: Incorrect Default Permissions
"IBM Robotic Process Automation 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to incorrect permission assignment which could allow access to application configurations. IBM X-Force ID: 238679."
- 9.8 Critical severity
Robotic Process Automation: Weak Password Requirements
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.