CVE-2023-35900

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jul 19, 2023
Updated: Jul 28, 2023
CWE ID 200

Summary

CVE-2023-35900: IBM Robotic Process Automation for Cloud Pak versions 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 unintentionally reveal server version information. This disclosure could help cybercriminals identify potential operating system vulnerabilities to exploit. IBM's X-Force has documented this issue under ID 259368.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • IBM Robotic Process Automation
  • Ibm Robotic Process Automation For Cloud Pak

Affected Vendors

  • IBM Corporation

Advisories, Assessments, and Mitigations