IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from system memory. IBM X-Force ID: 238053.
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Robotic_process_automation | Ibm | * | 21.0.7 (excluding) |
| Robotic_process_automation_for_cloud_pak | Ibm | * | 21.0.7 (excluding) |