CVE-2020-4621high

CVE-2020-4621: high-severity vulnerability in IBM Data Risk Manager

Published · Updated

Follow this CVE+ Monitor Data Risk Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 1.3%
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981.
CVSS:3.0/AV:N/S:U/C:H/AC:L/A:H/UI:N/I:H/PR:L/RL:O/RC:C/E:U
Affected products
IBM · Data Risk Manager
Related CVEs — IBM Data Risk Manager

In the same product, most dangerous first.

CVE-2020-4427CRITICALCVE-2020-4427EPSS 70.0%KEVCVE-2020-4430MEDIUMCVE-2020-4430EPSS 68.5%KEVCVE-2020-4428CRITICALCVE-2020-4428EPSS 61.7%KEVCVE-2020-4429CRITICALCVE-2020-4429EPSS 72.0%CVE-2020-4620HIGHCVE-2020-4620EPSS 5.2%CVE-2020-4616MEDIUMCVE-2020-4616EPSS 1.7%