CVE-2022-29856 - A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages

HIGH

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages

Published Apr 29, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.57%

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages.

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

Link	Providers	Tags
https://dolosgroup.io/blog		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-34174		Advisory
https://www.automationanywhere.com/products/automation-360		x_refsource_MISCProductVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 29, 2022

Updated Aug 3, 2024

Reserved Apr 27, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 29, 2022

Updated Aug 3, 2024

GitHub

No data