8.8
High
CVE-2022-43844 IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control
Description
IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Robotic Process Automation for Cloud Pak 20.12 | 20.12 → < 21.0.3 | 21.0.3 |
Other CVEs of Robotic Process Automation for Cloud Pak
The 12 CVEs of Robotic Process Automation for Cloud Pak →
CVE-2024-49825
IBM Robotic Process Automation and Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.20 and 23.0.0…
6.3
Medium
CVE-2024-51457
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 is vulnerable to…
4.4
Medium
CVE-2024-49824
IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation…
6.5
Medium
CVE-2023-45189
A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through…
6.5
Medium