PT-2019-17020 · Automation Anywhere+1 · Automation Anywhere+1
CVE-2019-4296
·
Publicado
2019-07-01
·
Atualizado
2023-02-03
CVSS v3.1
3.3
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Robotic Process Automation with Automation Anywhere version 11
Description
The issue allows a local user to obtain e-mail contents from the client debug log file, potentially leading to information disclosure.
Recommendations
For IBM Robotic Process Automation with Automation Anywhere version 11, consider restricting access to the client debug log file to minimize the risk of exploitation. As a temporary workaround, limit local user privileges to prevent unauthorized access to sensitive information.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Automation Anywhere
Ibm Robotic Process Automation