CVE-2023-38734

MediumCVSS 6.6

Published: 22/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

IBM Robotic Process Automation versions 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory.

Risk Assessment

Incorrect privilege assignment may lead to unauthorized access to the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and review user privileges after importing from LDAP.

Original NVD description (English source)

IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an LDAP directory. IBM X-Force ID: 262481.