Security Bypass in IBM Data Risk Manager by Authenticated Users
CVE-2020-4611
8.8HIGH
Summary
IBM Data Risk Manager (iDNA) version 2.0.6 is susceptible to a security bypass issue, allowing authenticated users to perform actions typically restricted to administrators. This vulnerability may enable unauthorized access to sensitive data and critical operations, posing a significant risk to overall data security management. Regular updates and access controls are essential to mitigate such vulnerabilities.
Affected Version(s)
Data Risk Manager 2.0.6
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved