CVE-2023-45189: IBM Robotic Process Automation information disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-03 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability in IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.10, 23.0.0 through 23.0.10 may result in access to client vault credentials. This difficult to exploit vulnerability could allow a low privileged attacker to programmatically access client vault credentials. IBM X-Force ID: 268752.

Affected products

IBM Robotic Process Automation for Cloud Pak: from 21.0.0 through 21.0.7; from 23.0.0 through 23.0.10

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/268752
https://www.ibm.com/support/pages/node/7065204
https://exchange.xforce.ibmcloud.com/vulnerabilities/268752
https://www.ibm.com/support/pages/node/7065204

Get alerted when CVE-2023-45189 or the next vulnerability affects your stack