by Kastro
Paper/Archive/CVE-2020-4428

CVE-2020-4428

IBM Data Risk Manager — IBM Data Risk Manager Remote Code Execution Vulnerability

KEV · due 3 MayEPSS 62%public exploitSSVC actCVSS 9.1
critical.is priorityof 100
97
CVSS 9.1 (CNA)9.1 / 10 × 3027.3In CISA KEV+3030.0EPSS percentile 99.2.992 × 2019.8Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.

Affected

ProductAffectedFixed inSource
Data Risk Manager2.0.1–CNA
Data Risk Manager2.0.2–CNA
Data Risk Manager2.0.3–CNA
Data Risk Manager2.0.4–CNA
Data Risk Manager2.0.5–CNA
Data Risk Manager2.0.6–CNA

Scores by source

ibm (CNA)9.1CVSS:3.0/AC:L/AV:N/S:C/A:H/C:H/PR:H/UI:N/I:H/E:U/RL:O/RC:C
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refibm.com/support/pages/node/6206875refexchange.xforce.ibmcloud.com/vulnerabilities/180533refseclists.org/fulldisclosure/2024/Nov/1refseclists.org/fulldisclosure/2024/Nov/0refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4428kevcisa.gov/known-exploited-vulnerabilities-catalog