173 matches found
Design/Logic Flaw
IBM Data Risk Manager iDNA 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927...
Hardcoded credentials
IBM Data Risk Manager iDNA 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983...
Input validation
IBM Data Risk Manager iDNA 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could all...
Cross site scripting
IBM Data Risk Manager iDNA 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184928...
CVE-2020-4622
IBM Data Risk Manager iDNA 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983...
CVE-2020-4622
CVE-2020-4622 : IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials (password/cryptographic key) used for its own inbound authentication, outbound communication to external components, or encryption of internal data. This could undermine authentication/crypto trust within the produ...
CVE-2020-4621
IBM Data Risk Manager iDNA 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981...
CVE-2020-4620
CVE-2020-4620 affects IBM Data Risk Manager (iDNA) 2.0.6. The issue arises from improper validation of file extensions, allowing a remote authenticated attacker to upload arbitrary files via a crafted HTTP request. The uploaded file could enable remote code execution on the vulnerable system. The...
CVE-2020-4620
IBM Data Risk Manager iDNA 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could all...
CVE-2020-4618
IBM Data Risk Manager iDNA 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937...
CVE-2020-4619
CVE-2020-4619 concerns IBM Data Risk Manager (iDNA) 2.0.6, where user credentials are stored in plaintext and readable by an authenticated user. The IBM security page confirms multiple related entries and details the impact as credential exposure and improper storage on the server side. Practical...
CVE-2020-4615
IBM Data Risk Manager iDNA 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184928...
CVE-2020-4617
IBM Data Risk Manager iDNA 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 184930...
CVE-2020-4616
CVE-2020-4616 affects IBM Data Risk Manager (iDNA) 2.0.6. A specially crafted HTTP request could disclose sensitive username information (confidentiality impact: PARTIAL). IBM X-Force entry shows multiple related scores (CVSSv2 5.0; CVSSv3.1 5.3) and related risk context. Remediation provided in ...
CVE-2020-4616
IBM Data Risk Manager iDNA 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929...
CVE-2020-4613
CVE-2020-4613 affects IBM Data Risk Manager (iDNA) 2.0.6, where weaker-than-expected cryptographic algorithms could allow an attacker to decrypt highly sensitive information. The issue is tracked under iDNA remediation pages and IBM X-Force entries. Mitigation and Fix: upgrade to DRM 2.0.6.4 firs...
CVE-2020-4614
IBM Data Risk Manager iDNA 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 184927...
CVE-2020-4614
CVE-2020-4614 affects IBM Data Risk Manager (iDNA) 2.0.6. The issue is weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. Remediation is to upgrade to v2.0.6.4 and then apply subsequent fixpacks (2.0.6.5, 2.0.6.6) in order, as detailed in ...
CVE-2020-4612
CVE-2020-4612 affects IBM Data Risk Manager (iDNA) 2.0.6. An authenticated user can obtain sensitive information via a specially crafted HTTP request. Connected documentation confirms the issue and prescribes a remediation path: upgrade to DRM 2.0.6.4 first, then apply fixpacks 2.0.6.5 and 2.0.6....