{"id":"CVE-2020-4430","aliases":["EUVD-2020-25677","GHSA-86cc-wh6w-cw2h"],"status":"published","title":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote...","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/AV:N/A:N/AC:L/C:L/PR:L/UI:N/I:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.68544,"percentile":0.99345,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2020-05-07T19:20:20Z","modified":"2026-06-17T03:19:58Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/ibm_drm_rce","title":"IBM Data Risk Manager Unauthenticated Remote Code Execution","type":"exploit","platform":"Linux","date":"2020-04-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/ibm_drm_rce"},{"source":"metasploit","id":"exploit/linux/ssh/ibm_drm_a3user","title":"IBM Data Risk Manager a3user Default Password","type":"exploit","platform":"Unix","date":"2020-04-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/ssh/ibm_drm_a3user"},{"source":"metasploit","id":"auxiliary/admin/http/ibm_drm_download","title":"IBM Data Risk Manager Arbitrary File Download","type":"auxiliary","date":"2020-04-21","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/admin/http/ibm_drm_download"}],"products":[{"vendor":"ibm","product":"data risk manager"},{"vendor":"ibm","product":"data_risk_manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6206875","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/180535","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/1","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4430","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4430"},{"url":"https://github.com/advisories/GHSA-86cc-wh6w-cw2h"}],"sources":{"cve":[{"id":"CVE-2020-4430","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.","status":"published","published":"2020-05-07T19:20:20.323Z","modified":"2026-01-12T21:30:39.326Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/AV:N/A:N/AC:L/C:L/PR:L/UI:N/I:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:55.797746Z"}],"euvd":[{"id":"EUVD-2020-25677","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.","status":"published","published":"2020-05-07T19:20:20Z","modified":"2026-01-12T21:30:39Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/S:U/AV:N/A:N/AC:L/C:L/PR:L/UI:N/I:N/E:U/RC:C/RL:O","level":"medium"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T19:48:53.22038Z"}],"ghsa":[{"id":"GHSA-86cc-wh6w-cw2h","title":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote...","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.","status":"published","published":"2022-05-24T17:17:27Z","modified":"2025-11-04T00:30:30Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:04:25.970519Z"}],"kev":[{"id":"CVE-2020-4430","title":"IBM Data Risk Manager Directory Traversal Vulnerability","description":"IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.","cwes":["CWE-22"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2020-4430","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system. IBM X-Force ID: 180535.","status":"published","published":"2020-05-07T20:15:12.783Z","modified":"2026-06-17T03:19:58.813Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:06:00.784809Z"}]}}