CVE-2020-4429: IBM Data Risk Manager

Critical severity, CVSS 9.8. EPSS: 72% chance of exploitation in the next 30 days.

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.

Affected products

• IBM Data Risk Manager: version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; version 2.0.6 only

Published 2020-05-07. Last modified 2026-06-17.