CVE-2020-4621: High severity IBM Data Risk Manager vulnerability
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-4621?
CVE-2020-4621 is a vulnerability in IBM Data Risk Manager (iDNA) 2.0.6 that could allow an authenticated user to escalate their privileges to administrator.
What is the severity of CVE-2020-4621?
The severity of CVE-2020-4621 is high with a CVSS score of 8.8.
How can an authenticated user exploit CVE-2020-4621?
An authenticated user can exploit CVE-2020-4621 by bypassing insufficient authorization checks in IBM Data Risk Manager (iDNA) 2.0.6.
Is there a patch available for CVE-2020-4621?
Yes, a patch is available for CVE-2020-4621. You can find the patch at the following URL: [https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Data+Risk+Manager&release=2.0.4.1&platform=Linux&function=all](https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Data+Risk+Manager&release=2.0.4.1&platform=Linux&function=all)
Where can I find more information about CVE-2020-4621?
You can find more information about CVE-2020-4621 at the following URLs: [https://exchange.xforce.ibmcloud.com/vulnerabilities/184981](https://exchange.xforce.ibmcloud.com/vulnerabilities/184981), [https://www.ibm.com/support/pages/node/6335281](https://www.ibm.com/support/pages/node/6335281)