CVE-2023-35900

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.
References
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*
OR cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

28 Jul 2023, 15:51

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/259368 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/259368 - VDB Entry, Vendor Advisory
References (MISC) https://www.ibm.com/support/pages/node/7010895 - (MISC) https://www.ibm.com/support/pages/node/7010895 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
CWE NVD-CWE-noinfo

19 Jul 2023, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-07-19 01:15

Updated : 2024-02-05 00:01


NVD link : CVE-2023-35900

Mitre link : CVE-2023-35900

CVE.ORG link : CVE-2023-35900


JSON object : View

Products Affected

microsoft

  • windows

ibm

  • robotic_process_automation
  • robotic_process_automation_for_cloud_pak
  • robotic_process_automation_as_a_service

redhat

  • openshift
CWE
NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor