{"id":"CVE-2020-4430","vendor_project":"IBM","product":"Data Risk Manager","vulnerability_name":"IBM Data Risk Manager Directory Traversal Vulnerability","date_added":"2021-11-03","due_date":"2022-05-03","known_ransomware_use":"Unknown","short_description":"IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-22","cvss_version":"3.1","cvss_severity":"MEDIUM","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","nvd_published":"2020-05-07","nvd_status":"Analyzed","epss":0.68544,"epss_percentile":0.99305,"cvss_score":4.3,"days_published_to_kev":545,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2020-4430","by":"CyberMax"}