Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-22412: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client machine) to obtain a login access token. IBM X-Force ID: 223019.

CVE-2022-22412 · published 4 years ago

Summary

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client machine) to obtain a login access token. IBM X-Force ID: 223019.

What to do

Update ibm robotic_process_automation to version 21.0.3 or later.

Affected software

Vendor	Product	Affected versions
ibm	robotic_process_automation	>= 21.0.0, < 21.0.3 `cpe:2.3:a:ibm:robotic_process_automation::::::::`

Original advisory text

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client machine) to obtain a login access token. IBM X-Force ID: 223019.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/223019 VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/6607045 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.6 Medium

Exploitation

<1% chance of attack within 30 days

Timeline

Published26 Jul 2022

Updated31 Oct 2026

First seen29 Sep 2026

Sources

CVE-2022-22412 · NVD

Track software like this

Free during beta