CVE-2020-4429
First published: Thu May 07 2020(Updated: )
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Data Risk Manager | =2.0.1 | |
| IBM Data Risk Manager | =2.0.2 | |
| IBM Data Risk Manager | =2.0.3 | |
| IBM Data Risk Manager | =2.0.4 | |
| IBM Data Risk Manager | =2.0.5 | |
| IBM Data Risk Manager | =2.0.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of IBM Data Risk Manager?
The vulnerability ID of IBM Data Risk Manager is CVE-2020-4429.
What is the severity level of CVE-2020-4429?
The severity level of CVE-2020-4429 is critical.
How does CVE-2020-4429 impact IBM Data Risk Manager?
CVE-2020-4429 allows a remote attacker to login and execute arbitrary code on the system with root privileges in IBM Data Risk Manager.
Which versions of IBM Data Risk Manager are affected by CVE-2020-4429?
Versions 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 of IBM Data Risk Manager are affected by CVE-2020-4429.
How can I mitigate the vulnerability CVE-2020-4429 in IBM Data Risk Manager?
To mitigate the vulnerability CVE-2020-4429 in IBM Data Risk Manager, update to a patched version that does not have the default password for the IDRM administrative account.
- collector/ibm-support
- collector/nvd-index
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/tags
- vendor/ibm
- canonical/ibm data risk manager
- version/ibm data risk manager/2.0.1
- version/ibm data risk manager/2.0.2
- version/ibm data risk manager/2.0.3
- version/ibm data risk manager/2.0.4
- version/ibm data risk manager/2.0.5
- version/ibm data risk manager/2.0.6