CVE-2020-4428 : IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authen

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533.

Published 2020-05-07 20:15:13

Updated 2020-05-08 14:15:03

Source IBM Corporation

View at NVD, CVE.org

Products affected by CVE-2020-4428

IBM » Data Risk Manager » Version: 2.0.1
cpe:2.3:a:ibm:data_risk_manager:2.0.1:*:*:*:*:*:*:*
Matching versions
IBM » Data Risk Manager » Version: 2.0.2
cpe:2.3:a:ibm:data_risk_manager:2.0.2:*:*:*:*:*:*:*
Matching versions
IBM » Data Risk Manager » Version: 2.0.3
cpe:2.3:a:ibm:data_risk_manager:2.0.3:*:*:*:*:*:*:*
Matching versions
IBM » Data Risk Manager » Version: 2.0.4
cpe:2.3:a:ibm:data_risk_manager:2.0.4:*:*:*:*:*:*:*
Matching versions
IBM » Data Risk Manager » Version: 2.0.5
cpe:2.3:a:ibm:data_risk_manager:2.0.5:*:*:*:*:*:*:*
Matching versions
IBM » Data Risk Manager » Version: 2.0.6
cpe:2.3:a:ibm:data_risk_manager:2.0.6:*:*:*:*:*:*:*
Matching versions

CVE-2020-4428 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

IBM Data Risk Manager Remote Code Execution Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2020-4428

Added on 2021-11-03 Action due date 2022-05-03

Exploit prediction scoring system (EPSS) score for CVE-2020-4428

EPSS FAQ

0.54%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2020-4428

IBM Data Risk Manager Unauthenticated Remote Code Execution

Disclosure Date: 2020-04-21

First seen: 2020-05-14

exploit/linux/http/ibm_drm_rce

IBM Data Risk Manager (IDRM) contains three vulnerabilities that can be chained by an unauthenticated attacker to achieve remote code execution as root. The first is an unauthenticated bypass, followed by a command injection as the server user, and finally ab

More information

CVSS scores for CVE-2020-4428

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C	8.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.1	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	2.3	6.0	IBM Corporation
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High
9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	2.3	6.0	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2020-4428

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-4428

https://www.ibm.com/support/pages/node/6206875

Security Bulletin: Vulnerabilities exist in IBM Data Risk Manager (CVE-2020-4427, CVE-2020-4428, CVE-2020-4429, and CVE-2020-4430)
Patch;Vendor Advisory

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/180533

IBM Data Risk Manager command execution CVE-2020-4428 Vulnerability Report
VDB Entry;Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-4428