698 matches found
IBM Data Risk Manager Information Disclosure Vulnerability (CNVD-2020-53513)
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. An information disclosure vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit this vulnerability to obtain sensitive information via a specially...
IBM Data Risk Manager Cross-Site Request Forgery Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A cross-site request forgery vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit this vulnerability to perform malicious and unauthorized actions...
IBM Data Risk Manager Cross-Site Scripting Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A cross-site scripting vulnerability exists in IBM Data Risk Manager 2.0.6. The vulnerability allows an attacker to embed arbitrary JavaScript code in the Web UI to change...
IBM Data Risk Manager User Credentials Plaintext Storage Vulnerability
IBM Data Risk Manager is a data risk manager that helps discover, analyze and visualize business risks associated with data. A user credentials plaintext storage vulnerability exists in IBM Data Risk Manager 2.0.6. An attacker could exploit the vulnerability to read user credentials in plaintext...
CVE-2020-4619
IBM Data Risk Manager iDNA 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976...
CVE-2020-4621
IBM Data Risk Manager iDNA 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981...
CVE-2020-4619
IBM Data Risk Manager iDNA 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976...
CVE-2020-4620
IBM Data Risk Manager iDNA 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could all...
CVE-2020-4621
IBM Data Risk Manager iDNA 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authorization checks. IBM X-Force ID: 184981...
CVE-2020-4620
IBM Data Risk Manager iDNA 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious file, which could all...
CVE-2020-4622
IBM Data Risk Manager iDNA 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983...
CVE-2020-4622
IBM Data Risk Manager iDNA 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983...
CVE-2020-4617
IBM Data Risk Manager iDNA 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 184930...
CVE-2020-4618
IBM Data Risk Manager iDNA 2.0.6 could allow a privileged user to cause a denial of service due to improper input validation. IBM X-Force ID: 184937...
CVE-2020-4616
IBM Data Risk Manager iDNA 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929...
CVE-2020-4612
IBM Data Risk Manager iDNA 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. IBM X-Force ID: 184924...
CVE-2020-4613
IBM Data Risk Manager iDNA 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 184925...
CVE-2020-4616
IBM Data Risk Manager iDNA 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 184929...