CVE-2023-38733
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 may allow an authenticated user to view sensitive information from installation logs.
Risk Assessment
The potential exposure of sensitive information could lead to privacy breaches and data security issues within the organization.
Recommendation
It is recommended to upgrade to the latest version of the software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IBM Robotic Process Automation
See all- CVE-2023-40370Low
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 is vulnerable to information disclosure of script content if the remote REST request policy is enabled.
- CVE-2023-38734Medium
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory.
- CVE-2023-38732Medium
IBM Robotic Process Automation server versions 21.0.0 through 21.0.7 could allow an authenticated user to view sensitive information from application logs.
- CVE-2023-35901Low
IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 are vulnerable to client side validation bypass, which could allow invalid changes or values in some fields.
Original NVD description (English source)
IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 server could allow an authenticated user to view sensitive information from installation logs. IBM X-Force Id: 262293.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS