CVE-2022-35280

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2022-35280
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 230634.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.ibm.com/support/pages/node/6610393 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/230634 Broken Link
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:robotic_process_automation_for_cloud_pak:21.0.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Information

Published : 2022-08-10 10:15

Updated : 2022-08-12 17:16

NVD link : CVE-2022-35280

Mitre link : CVE-2022-35280

JSON object : View

CWE
CWE-521

Weak Password Requirements

Advertisement

dedicated server usa
Products Affected

ibm

  • robotic_process_automation_for_cloud_pak

microsoft

  • windows