← Back

CVE-2022-39168

nvd nist
Published: Sep 29, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.

Affected (6)

Ibm
3 products
Robotic Process Automation
Robotic Process Automation For Cloud Pak
Robotic Process Automation For Services
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Robotic Process Automation
Version 21.0.3
Robotic Process Automation
Version 21.0.4
Ibm
Robotic Process Automation For Cloud Pak
Version 21.0.3
Robotic Process Automation For Cloud Pak
Version 21.0.4
Ibm
Robotic Process Automation For Services
Version 21.0.3
Robotic Process Automation For Services
Version 21.0.4

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.