Information Disclosure in IBM Data Risk Manager
CVE-2020-4612
4.3MEDIUM
Summary
IBM Data Risk Manager version 2.0.6 is vulnerable to information disclosure, allowing an authenticated user to craft and send a specially modified HTTP request. This request can result in unauthorized access to sensitive information, posing a risk to data integrity and user privacy. Proper security measures and vulnerability management are critical to protecting against such exploits.
Affected Version(s)
Data Risk Manager 2.0.6
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved