CVE-2020-4429

Published: May 7, 2020Modified: Nov 3, 2025

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.

Affected (6)

Products: Ibm: Data Risk Manager

Ibm

1 product

Data Risk Manager

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Data Risk Manager	Version 2.0.1
Ibm Data Risk Manager	Version 2.0.2
Ibm Data Risk Manager	Version 2.0.3
Ibm Data Risk Manager	Version 2.0.4
Ibm Data Risk Manager	Version 2.0.5
Ibm Data Risk Manager	Version 2.0.6