Vulnerability Description
IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content if the remote REST request computer policy is enabled. IBM X-Force ID: 263470.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Robotic Process Automation | >= 21.0.0, <= 21.0.7.1 |
| Ibm | Robotic Process Automation For Cloud Pak | >= 21.0.0, <= 21.0.7.1 |
| Redhat | Openshift | - |
| Microsoft | Windows | - |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/263470VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/7028218PatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/263470VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/7028218PatchVendor Advisory
FAQ
What is CVE-2023-40370?
CVE-2023-40370 is a vulnerability with a CVSS score of 3.7 (LOW). IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content if the remote REST request computer policy is enabled. IBM X-Force ID: 26347...
How severe is CVE-2023-40370?
CVE-2023-40370 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-40370?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Robotic Process Automation, Ibm Robotic Process Automation For Cloud Pak, Redhat Openshift, Microsoft Windows.