CVE-2020-4621

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/184981
• https://www.ibm.com/support/pages/node/6335281 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6335281

Frequently Asked Questions

• What is CVE-2020-4621?

  CVE-2020-4621 is a vulnerability in IBM Data Risk Manager (iDNA) 2.0.6 that could allow an authenticated user to escalate their privileges to administrator.

• What is the severity of CVE-2020-4621?

  The severity of CVE-2020-4621 is high with a CVSS score of 8.8.

• How can an authenticated user exploit CVE-2020-4621?

  An authenticated user can exploit CVE-2020-4621 by bypassing insufficient authorization checks in IBM Data Risk Manager (iDNA) 2.0.6.

• Is there a patch available for CVE-2020-4621?

  Yes, a patch is available for CVE-2020-4621. You can find the patch at the following URL: [https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Data+Risk+Manager&release=2.0.4.1&platform=Linux&function=all](https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Data+Risk+Manager&release=2.0.4.1&platform=Linux&function=all)

• Where can I find more information about CVE-2020-4621?

  You can find more information about CVE-2020-4621 at the following URLs: [https://exchange.xforce.ibmcloud.com/vulnerabilities/184981](https://exchange.xforce.ibmcloud.com/vulnerabilities/184981), [https://www.ibm.com/support/pages/node/6335281](https://www.ibm.com/support/pages/node/6335281)