CVE-2020-4613 describes a critical vulnerability in IBM Data Risk Manager (iDNA) version 2.0.6, where the software employs weak cryptographic algorithms. This flaw, categorized as CWE-327, could enable an unauthenticated remote attacker to decrypt highly sensitive information, leading to a significant compromise of confidentiality. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, requiring no user interaction. The primary impact is a complete loss of confidentiality, as indicated by the 'C:H' in the CVSS vector. Despite its high severity, there is currently no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Furthermore, the vulnerability has garnered minimal community discussion or media coverage, suggesting a low level of public awareness or immediate threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.0.6.4CPE matchmatch criteria | cpe:2.3:a:ibm:data_risk_manager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.