Information Disclosure Vulnerability in IBM Robotic Process Automation
CVE-2019-4295
4.9MEDIUM
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 1 July 2019
Summary
IBM Robotic Process Automation with Automation Anywhere 11 contains a vulnerability that could enable an attacker with specialized access to extract sensitive information from the credential vault. This risk emphasizes the importance of securing access controls and regular monitoring of administrative workflows to mitigate unauthorized information retrieval.
Affected Version(s)
Robotic Process Automation with Automation Anywhere 11
References
CVSS V3.1
Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved