{"id":"CVE-2023-45189","state":"PUBLISHED","title":"IBM Robotic Process Automation information disclosure","description":"A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials.  This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials.  IBM X-Force ID:  268752.","publishedAt":"2023-11-03T22:51:45.475Z","updatedAt":"2024-09-05T14:37:23.153Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Robotic Process Automation","IBM Robotic Process Automation for Cloud Pak"],"affected":[{"vendor":"IBM","product":"Robotic Process Automation","defaultStatus":"unaffected","versions":[{"version":"21.0.0","status":"affected","lessThanOrEqual":"21.0.7.10","versionType":"semver"},{"version":"23.0.0","status":"affected","lessThanOrEqual":"23.0.10","versionType":"semver"}]},{"vendor":"IBM","product":"Robotic Process Automation for Cloud Pak","defaultStatus":"unaffected","versions":[{"version":"21.0.0","status":"affected","lessThanOrEqual":"21.0.7.10","versionType":"semver"},{"version":"23.0.0","status":"affected","lessThanOrEqual":"23.0.10","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/7065204","https://exchange.xforce.ibmcloud.com/vulnerabilities/268752"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/45xxx/CVE-2023-45189.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-45189","state":"PUBLISHED","datePublished":"2023-11-03T22:51:45.475Z","dateUpdated":"2024-09-05T14:37:23.153Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-10-05T01:39:10.397Z"},"containers":{"cna":{"title":"IBM Robotic Process Automation information disclosure","descriptions":[{"lang":"en","value":"A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials.  This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials.  IBM X-Force ID:  268752."}],"affected":[{"vendor":"IBM","product":"Robotic Process Automation","defaultStatus":"unaffected","versions":[{"version":"21.0.0","status":"affected","lessThanOrEqual":"21.0.7.10","versionType":"semver"},{"version":"23.0.0","status":"affected","lessThanOrEqual":"23.0.10","versionType":"semver"}]},{"vendor":"IBM","product":"Robotic Process Automation for Cloud Pak","defaultStatus":"unaffected","versions":[{"version":"21.0.0","status":"affected","lessThanOrEqual":"21.0.7.10","versionType":"semver"},{"version":"23.0.0","status":"affected","lessThanOrEqual":"23.0.10","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7065204","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/268752","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-11-03T22:51:45.475Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/7065204","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/268752","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T20:14:20.111Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-05T14:36:59.442391Z","id":"CVE-2023-45189","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-05T14:37:23.153Z"}}]}}}