Skip to content
CVE PROGRAM SOURCE RECORD3.9 Low

CVE-2023-22591

IBM Robotic Process Automation session fixation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Robotic Process Automation

Default version status: unaffected

  • 21.0.1 to < 21.0.7affected
  • 23.0.0 to < 23.0.1affected

References