title: IBM Robotic Process Automation for Cloud Pak session fixation
description: IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control.   A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak.  IBM X-Force ID:  239081.
problem types: CWE-613 Insufficient Session Expiration
affected:
{
defaultStatus: unaffected
product: Robotic Process Automation for Cloud Pak
vendor: IBM
versions:
lessThan: 21.0.3, status: affected, version: 20.12, versionType: semver
}