PT-2020-18158

CVE-2020-4611

·

Published

2020-09-22

·

Updated

2021-07-21

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Data Risk Manager (iDNA) version 2.0.6
Description The issue allows an authenticated user to bypass security and execute actions reserved for admins.
Recommendations For IBM Data Risk Manager (iDNA) version 2.0.6, consider restricting access to administrative functions until a patch is available. As a temporary workaround, review and limit user permissions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾