CVE-2022-42442

Published: Nov 3, 2022Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

IBM Robotic Process Automation for Cloud Pak 21.0.1, 21.0.2, 21.0.3, 21.0.4, and 21.0.5 is vulnerable to exposure of the first tenant owner e-mail address to users with access to the container platform. IBM X-Force ID: 238214.

Affected (1)

Products: Ibm: Robotic Process Automation For Cloud Pak

Ibm

1 product

Robotic Process Automation For Cloud Pak

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ibm Robotic Process Automation For Cloud Pak	Before 21.0.6

Running on/with	Platform Versions
Redhat Openshift Container Platform	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/238214

Source: psirt@us.ibm.com

https://www.ibm.com/support/pages/node/6831787

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/238214

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.ibm.com/support/pages/node/6831787

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.