CVE-2022-43844

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2023-01-05

Last modified

2025-04-10

Weaknesses

CWE-613

Affected products

• Robotic Process Automation For Cloud Pak (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/239081
• https://www.ibm.com/support/pages/node/6852663