IBM RPA Vulnerability Exposes User IDs Across Tenants

CVE-2022-22506

What is CVE-2022-22506?

IBM Robotic Process Automation version 21.0.2 is affected by a vulnerability that can result in the exposure of user IDs across different tenants. This issue raises significant concerns regarding tenant isolation and data security, as unauthorized access to user identities could potentially lead to further security breaches. Organizations using this product should implement appropriate security measures to safeguard sensitive information and ensure tenant-level data separation.

References