CVE-2020-4615

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/184928 · VDB Entry
• ibm.com/support/pages/node/6335281 · Patch

More vulnerabilities in data risk manager

• CVE-2021-38915MEDIUM 6.5IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
• CVE-2021-38862HIGH 7.5IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti…
• CVE-2020-4622HIGH 7.5IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbou…
• CVE-2020-4621HIGH 8.8IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient autho…
• CVE-2020-4620HIGH 8.8IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation …