CVE-2023-22592

Medium

Description

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.4 could allow a local user to perform unauthorized actions due to insufficient permission settings. IBM X-Force ID: 244073.

SeverityMedium

CVSS4.0

Exploit probability—

Product

Ibm Robotic Process Automation For Cloud Pak

PublishedJan 18, 2023

First seenJan 18, 2023

How to fix

Update

ibm robotic_process_automation_for_cloud_pak21.0.5 or later

Vendor advisories

ibm.com/support/pages/node/6855839

Affected products

Product	Affected versions	Fixed in
ibm robotic_process_automation_for_cloud_pak	21.0.1 ≤ v < 21.0.5	21.0.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.