CVE Vulnerabilities

CVE-2023-38733

Insertion of Sensitive Information into Log File

Published: Aug 22, 2023 | Modified: Nov 21, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 server could allow an authenticated user to view sensitive information from installation logs. IBM X-Force Id: 262293.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Robotic_process_automationIbm21.0.0 (including)21.0.7.3 (including)
Robotic_process_automationIbm23.0.0 (including)23.0.3 (including)

Potential Mitigations

References