CVE-2023-23468

Summary

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may allow creation of namespaces within a cluster. IBM X-Force ID: 244500.

Affected Software

VendorProductVersion RangeStatus
IBMRobotic Process Automation for Cloud Pak21.0.1 <= 21.0.7.3affected
IBMRobotic Process Automation for Cloud Pak23.0.0 <= 23.0.3affected

Weaknesses

  • 284 Improper Access Control

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References