IBM Data Risk Manager Directory Traversal Vulnerability

Mô tả

Tham khảo

• exchange.xforce.ibmcloud.com/vulnerabilities/180535 · VDB Entry
• ibm.com/support/pages/node/6206875 · Patch
• seclists.org/fulldisclosure/2024/Nov/0 · Mailing List
• seclists.org/fulldisclosure/2024/Nov/1 · Mailing List
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2020-4430

Lỗ hổng khác của data risk manager

• CVE-2021-38915TRUNG BÌNH 6.5IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
• CVE-2021-38862CAO 7.5IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti…
• CVE-2020-4622CAO 7.5IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbou…
• CVE-2020-4621CAO 8.8IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient autho…
• CVE-2020-4620CAO 8.8IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation …