CVE-2020-4430
Published: May 7, 2020
Modified: Jan 12, 2026
CVSS v3.0
4.3
Description
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.
| Vendor | Product | Versions |
|---|---|---|
IBM | Data Risk Manager | affected 2.0.1affected 2.0.2affected 2.0.3affected 2.0.4affected 2.0.5+1 more versions |
CVSS v3.0 Details
CVSS v3.0 Vector
CVSS:3.0/S:U/AV:N/A:N/AC:L/C:L/PR:L/UI:N/I:N/E:U/RC:C/RL:O
Scope
Attack Vector
Availability
Attack Complexity
Confidentiality
Privileges Required
User Interaction
Integrity
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now