CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-05-07
IBM Data Risk Manager Directory Traversal Arbitrary File Download Vulnerability (CVE-2020-4430) Security Advisory
[Affected Scope] IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, and 2.0.4.
[Impact] A remote authenticated attacker can exploit this vulnerability to traverse directories and download arbitrary sensitive files from the system, leading to information disclosure.
[Mitigation] Apply the official security patches provided by IBM to upgrade to a secure version.