CVE-2023-35901 LOW

CVE-2023-35901: IBM Robotic Process Automation security bypass

Vendor Ibm
Product Robotic Process Automation
Weakness CWE-287 · Improper authentication
Published July 16, 2023
Last update October 22, 2024
View on NVD All CVEs

CVSS base score

2.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid changes or values in some fields. IBM X-Force ID: 259380.

Key dates

02Disclosure timeline

July 16, 2023 CVE published
October 22, 2024 Record updated