IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory. IBM X-Force ID: 238053.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Robotic_process_automation | Ibm | * | 21.0.7 (excluding) |
Robotic_process_automation_for_cloud_pak | Ibm | * | 21.0.7 (excluding) |