Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2023-38734

IBM Robotic Process Automation privilege escalation

Description

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Robotic Process Automation

Default version status: unaffected

  • 21.0.0 to ≤ 21.0.7.1affected
  • 23.0.0 to ≤ 23.0.1affected

References