IBM Data Risk Manager Remote Code Execution Vulnerability
IBM — Data Risk Manager
- Added to KEV catalog
- 3 November 2021
- Federal remediation due date
- 3 May 2022
- Weakness classification (CWE)
- CWE-78
CISA Description
IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-4428
More IBM Vulnerabilities
IBM Langflow Code Injection Vulnerability
IBM Aspera Faspex Code Execution Vulnerability
IBM InfoSphere BigInsights Invalid Input Vulnerability
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
IBM Data Risk Manager Directory Traversal Vulnerability
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services