CVE-2022-36117

CVE-2022-36117 is a low-severity vulnerability affecting Blue Prism Enterprise versions 6.0 through 7.01. It allows an authenticated user in a misconfigured environment to bypass administrative access controls through reverse engineering. If credential access is configured for a machine or runtime resource security group, an attacker could spoof a machine to request and decrypt encrypted credentials. The CVSS score is 3.1 (LOW), indicating network access, high attack complexity, and low confidentiality impact. There is no known active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.