CVE-2020-4612

Description

References

• exchange.xforce.ibmcloud.com/vulnerabilities/184924 · VDB Entry
• ibm.com/support/pages/node/6335281 · Patch

data risk manager의 다른 취약점

• CVE-2021-38915보통 6.5IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
• CVE-2021-38862높음 7.5IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti…
• CVE-2020-4622높음 7.5IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbou…
• CVE-2020-4621높음 8.8IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient autho…
• CVE-2020-4620높음 8.8IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation …