CVE-2020-4428criticalunder attackCWE-78

CVE-2020-4428: critical vulnerability in IBM Data Risk Manager

Published · Updated

85Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.1epss 62%
from disclosure to weapon0 days
Published on NVDMay 7
metasploitApr 21
CISA KEV+545d
exploitation probability
62%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A vulnerability in IBM Data Risk Manager allows someone who has logged into the system to run any commands they want on the server. This is dangerous because an attacker could take full control of the system.

Technical detail

CWE-78 command injection vulnerability in IBM Data Risk Manager 2.0.1-2.0.4 allows authenticated remote attackers to execute arbitrary OS commands through unvalidated input passed to system command execution functions. Successful exploitation grants complete system compromise with the privileges of the application process.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.
CVSS:3.0/AC:L/AV:N/S:C/A:H/C:H/PR:H/UI:N/I:H/E:U/RL:O/RC:C
Affected products
IBM · Data Risk Manager
Related CVEs — IBM Data Risk Manager

In the same product, most dangerous first.

CVE-2020-4427CRITICALCVE-2020-4427EPSS 70.0%KEVCVE-2020-4430MEDIUMCVE-2020-4430EPSS 68.5%KEVCVE-2020-4429CRITICALCVE-2020-4429EPSS 72.0%CVE-2020-4620HIGHCVE-2020-4620EPSS 5.2%CVE-2020-4616MEDIUMCVE-2020-4616EPSS 1.7%CVE-2020-4611HIGHCVE-2020-4611EPSS 1.6%
References
http://seclists.org/fulldisclosure/2024/Nov/0http://seclists.org/fulldisclosure/2024/Nov/1https://exchange.xforce.ibmcloud.com/vulnerabilities/180533https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4428https://www.ibm.com/support/pages/node/6206875