CVE-2023-22591 — IBM Robotic Process Automation session fixation
IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalida…
Published: 2023-03-15 · CVSS: 3.9 · CVSS 3.1
IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7