IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM X-Force ID: 238678.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/6852655 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/238678 | vdb entry vendor advisory |