173 matches found
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2020-14305 DESCRIPTION: Linux Kernel could allow a remote attacker to gain elevated privileges on the system, caused by an out-of-bounds memory write flaw in how the Voice Over IP H.323...
IBM Data Risk Manager Weak Encryption Algorithm Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A weak cryptographic algorithm vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit the vulnerability to decrypt sensitive information...
IBM Data Risk Manager User Credentials Plaintext Storage Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A user credentials plaintext storage vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit the vulnerability to read user credentials in plaintext...
IBM Data Risk Manager weak encryption algorithm vulnerability (CNVD-2020-53514)
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A weak cryptographic algorithm vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit the vulnerability to decrypt highly sensitive information...
IBM Data Risk Manager Arbitrary File Upload Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. An arbitrary file upload vulnerability exists in IBM Data Risk Manager 2.0.6. The vulnerability stems from improper validation of file extensions. A remote attacker could...
IBM Data Risk Manager Cross-Site Request Forgery Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A cross-site request forgery vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit this vulnerability to perform malicious and unauthorized actions...
IBM Data Risk Manager Information Disclosure Vulnerability (CNVD-2020-53513)
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. An information disclosure vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit this vulnerability to obtain sensitive information via a specially...
IBM Data Risk Manager Elevation of Privilege Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. An elevation of privilege vulnerability exists in IBM Data Risk Manager 2.0.6. The vulnerability stems from insufficient authorization checks. An attacker could exploit the...
IBM Data Risk Manager Denial of Service Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A denial of service vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit this vulnerability to cause a denial of service...
IBM Data Risk Manager Hardcoded Credentials Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A hard-coded credentials vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit the vulnerability to obtain hard-coded credentials such as passwords...
IBM Data Risk Manager Security Mechanism Bypass Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A security mechanism bypass vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit the vulnerability to perform administrator actions beyond their...
IBM Data Risk Manager Cross-Site Scripting Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A cross-site scripting vulnerability exists in IBM Data Risk Manager 2.0.6. The vulnerability allows an attacker to embed arbitrary JavaScript code in the Web UI to change...
IBM Data Risk Manager Information Disclosure Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. An information disclosure vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit this vulnerability to obtain sensitive username information via a...
CVE-2020-4620
IBM Data Risk Manager iDNA 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could all...
CVE-2020-4619
IBM Data Risk Manager iDNA 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976...
CVE-2020-4620
IBM Data Risk Manager iDNA 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could all...
CVE-2020-4621
IBM Data Risk Manager iDNA 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981...
CVE-2020-4622
IBM Data Risk Manager iDNA 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983...