CVE-2020-4430

IBM Data Risk Manager Directory Traversal Vulnerability

IBM — Data Risk Manager

Added to KEV catalog: 3 November 2021
Federal remediation due date: 3 May 2022
Weakness classification (CWE): CWE-22

CISA Description

IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-4430

View on NVD View on MITRE CVE View full CISA catalog

More IBM Vulnerabilities

CVE-2026-9198

IBM Langflow Code Injection Vulnerability

CVE-2022-47986

IBM Aspera Faspex Code Execution Vulnerability

CVE-2013-3993

IBM InfoSphere BigInsights Invalid Input Vulnerability

CVE-2015-7450

IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

CVE-2020-4428

IBM Data Risk Manager Remote Code Execution Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services