CVE-2020-4619

Published: Sep 22, 2020

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.0

5.3

MEDIUM

IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 184976.

Vendor	Product	Versions
IBM	Data Risk Manager	affected `2.0.6`

CVSS v3.0 Vector

CVSS:3.0/UI:N/A:N/I:N/PR:L/AV:N/S:U/C:H/AC:H/RL:O/RC:C/E:U

User Interaction

None

Availability

None

Integrity

None

Privileges Required

Low

Attack Vector

Network

Scope

Unchanged

Confidentiality

High

Attack Complexity

High

x_refsource_CONFIRM

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.