CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1878
https://notcve.org/view.php?id=CVE-2018-1878
IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714. IBM Robotic Process Automation with Automation Anywhere 11 podría divulgar información sensible en una petición web que podría ayudar en futuros ataques contra el sistema. IBM X-Force ID: 151714. • https://exchange.xforce.ibmcloud.com/vulnerabilities/151714 https://www.ibm.com/support/docview.wss?uid=ibm10735977 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1876
https://notcve.org/view.php?id=CVE-2018-1876
IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control Room log file after installation. IBM X-Force ID: 151707. En ciertas condiciones, IBM Robotic Process Automation with Automation Anywhere 11 podría mostrar la contraseña en un archivo de registro de Control Room tras la instalación. IBM X-Force ID: 151707. • https://exchange.xforce.ibmcloud.com/vulnerabilities/151707 https://www.ibm.com/support/docview.wss?uid=ibm10735967 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-1877
https://notcve.org/view.php?id=CVE-2018-1877
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unencrypted passwords that would be available to a local user. IBM X-Force ID: 151713. IBM Robotic Process Automation with Automation Anywhere 11 podría almacenar información altamente en forma de contraseñas sin cifrar que estarían disponibles para un usuario local. IBM X-Force ID: 151713. • http://www.ibm.com/support/docview.wss?uid=ibm10735973 https://exchange.xforce.ibmcloud.com/vulnerabilities/151713 • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 9.3EPSS: 1%CPEs: 2EXPL: 0CVE-2018-1552
https://notcve.org/view.php?id=CVE-2018-1552
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, caused by a missing restriction in which file types can be uploaded to the control room. By uploading a malicious file and tricking a victim to run it, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 142889. IBM Robotic Process Automation with Automation Anywhere 10.0 y 11.0 podría permitir que un atacante remoto ejecute código arbitrario en el sistema, provocado por la falta de restricciones por las que los tipos de archivos se pueden subir a la sala de control. Mediante la subida de un archivo malicioso y engañando a una víctima para que lo ejecute, un atacante podría explotar esta vulnerabilidad para ejecutar código arbitrario en el sistema. • http://www.ibm.com/support/docview.wss?uid=swg22016247 https://exchange.xforce.ibmcloud.com/vulnerabilities/142889 • CWE-434: Unrestricted Upload of File with Dangerous Type •