CVE-2023-35900

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/259368	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7010895	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/259368	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7010895	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:robotic_process_automation::::::::
	cpe:2.3:a:ibm:robotic_process_automation::::::::
	cpe:2.3:a:ibm:robotic_process_automation_as_a_service::::::::
	cpe:2.3:a:ibm:robotic_process_automation_as_a_service::::::::
	cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak::::::::
	cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak::::::::

OR	cpe:2.3:a:redhat:openshift:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

21 Nov 2024, 08:08

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~5.3~~	v2 : unknown v3 : 4.3
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/259368 - VDB Entry, Vendor Advisory~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/259368 - VDB Entry, Vendor Advisory
References	~~() https://www.ibm.com/support/pages/node/7010895 - Patch, Vendor Advisory~~	() https://www.ibm.com/support/pages/node/7010895 - Patch, Vendor Advisory

Information

Published : 2023-07-19 01:15

Updated : 2024-11-21 08:08

NVD link : CVE-2023-35900

Mitre link : CVE-2023-35900

CVE.ORG link : CVE-2023-35900

JSON object : View

Products Affected

redhat

openshift

ibm

robotic_process_automation_for_cloud_pak
robotic_process_automation_as_a_service
robotic_process_automation

microsoft

windows

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo

{"id": "CVE-2023-35900", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2023-07-19T01:15:10.747", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/259368", "tags": ["VDB Entry", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://www.ibm.com/support/pages/node/7010895", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/259368", "tags": ["VDB Entry", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.ibm.com/support/pages/node/7010895", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-200"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368."}], "lastModified": "2024-11-21T08:08:57.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A7E8F79-818A-48A9-85EF-C288C9B498CD", "versionEndIncluding": "21.0.7.4"}, {"criteria": "cpe:2.3:a:ibm:robotic_process_automation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AD41BDB-D7C2-408F-A62E-B0B232D1B5AA", "versionEndIncluding": "23.0.5", "versionStartIncluding": "23.0.0"}, {"criteria": "cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "826E2455-8E66-44DE-8247-6941587E9031", "versionEndIncluding": "21.0.7.4"}, {"criteria": "cpe:2.3:a:ibm:robotic_process_automation_as_a_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4401320-D4FC-4BB4-B282-870E5B5C3AAD", "versionEndIncluding": "23.0.5", "versionStartIncluding": "23.0.0"}, {"criteria": "cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E487A1C-74C8-4AEF-A0CF-2088EB4AE7AE", "versionEndIncluding": "21.0.7.4"}, {"criteria": "cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA019BF9-1C55-4719-8124-C5620E8BB20B", "versionEndIncluding": "23.0.5", "versionStartIncluding": "23.0.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:openshift:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F08E234C-BDCF-4B41-87B9-96BD5578CBBF"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}