Information Disclosure Vulnerability in IBM Robotic Process Automation
CVE-2018-1877
6.2MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 2 November 2018
Summary
IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to an information disclosure issue where unencrypted passwords could be stored, making them accessible to local users. This flaw can lead to unauthorized access to sensitive data, posing significant risks to data integrity and confidentiality. It's crucial for users to implement appropriate security measures and stay informed about this vulnerability to mitigate potential threats.
Affected Version(s)
Robotic Process Automation with Automation Anywhere 11
References
CVSS V3.1
Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved