5.3
Moyenne
CVE-2021-38915 IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user
Description
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Data Risk Manager | 2.0.6 | Pas de correctif indiqué |
Autres CVE de Data Risk Manager
Les 18 CVE de Data Risk Manager →
CVE-2021-38862
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to…
5.9
Moyenne
CVE-2020-4622
IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it…
5.9
Moyenne
CVE-2020-4621
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due…
8.8
Élevée
CVE-2020-4620
IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by…
8.8
Élevée