IBM · Data Risk Manager
CVE-2020-4430
IBM Data Risk Manager Directory Traversal Vulnerability
Nedir
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.
CISA: IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 3 Mayıs 2022
IBM için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 3 Kas 2021 | Security Bypass | Data Risk Manager | Kritik 9,0 | 70% |
| 3 Kas 2021 | Remote Code Execution | Data Risk Manager | Kritik 9,1 | 62% |
| 4 Ağu 2026 | Code Injection | Langflow | Kritik 9,8 | 29% |
| 21 Şub 2023 | Code Execution | Aspera Faspex | Kritik 9,8 | >99,9% |
| 25 May 2022 | Invalid Input | InfoSphere BigInsights | Orta 6,5 | 4,8% |
| 10 Oca 2022 | Code Injection. | WebSphere Application Server and Server Hypervisor Edition | Kritik 9,8 | 98% |
| 3 Kas 2021 | Remote Code Execution | Planning Analytics | Kritik 10,0 | 86% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.