8.8
Élevée
CVE-2020-4621 IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due…
Description
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Data Risk Manager | 2.0.6 | Pas de correctif indiqué |
Autres CVE de Data Risk Manager
Les 18 CVE de Data Risk Manager →
CVE-2021-38915
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user
5.3
Moyenne
CVE-2021-38862
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to…
5.9
Moyenne
CVE-2020-4622
IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it…
5.9
Moyenne
CVE-2020-4620
IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by…
8.8
Élevée