Hard-Coded Credentials in IBM Data Risk Manager Product

CVE-2020-4622

Summary

IBM Data Risk Manager (iDNA) version 2.0.6 is vulnerable due to the presence of hard-coded credentials, including a password or cryptographic key. These credentials are used for inbound authentication and may facilitate unauthorized access or lead to exposure of sensitive data. The vulnerability poses significant security risks, as it could allow attackers to exploit the system’s authentication mechanisms and access internal data. It is crucial for users of this version to review their security posture and take corrective measures to mitigate the risks associated with this vulnerability.

References