Back to overview

CVE-2020-4429

CRITICAL
10.0
CVSS 3.0
Description
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.

Metadata

CVE ID
CVE-2020-4429
State
PUBLISHED
Assigner
ibm
Reserved
2019-12-30 00:00 UTC
Published
2020-05-07 19:20 UTC
Last updated
2025-11-03 21:44 UTC
Vendor / Product
IBM / Data Risk Manager
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.0
CVSS:3.0/S:C/AV:N/A:H/AC:L/PR:N/C:H/I:H/UI:N/RC:C/RL:O/E:U
Affected products (1)
VendorProductPlatformVersions
IBM Data Risk Manager — 2.0.1, 2.0.2, 2.0.3, 2.0.4 …
Weakness (CWE)
CWESourceDescription
— cna Gain Access
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.0 cna CVSS:3.0/S:C/AV:N/A:H/AC:L/PR:N/C:H/I:H/UI:N/RC:C/RL:O/E:U
References (2)
Back to overview