CVE-2023-38732

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Aug 22, 2023
Updated: Aug 26, 2023
CWE ID 532

Summary

CVE-2023-38732 is a vulnerability found in IBM Robotic Process Automation versions 21.0.0 through 21.0.7, allowing authenticated users to access sensitive information from application logs. The vulnerability has a base severity rating of "MEDIUM" and a base score of 4.3 according to NVD. The exploitability score is 2.8, and the confidentiality impact is rated as "LOW." Affected products include mjHpBX, mjHpBW, qMYd-v, nPokcP, qMYd-u, osX00w, nmATTA, r2R9Dk, nmATTB, mjHpBY, mxayax, o3AxSx, mmOpcL, mmOpcK, n8xBQU, qMYd-w, osX00u, nPokcQ, o3AxSy, nPokcV, n8xBQT, nPokcU, and n8xBQS. There is no available analysis or remediation information provided in the text.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share