critical·Exposed Panels·Updated Oct 23, 2025

IBM Data Risk Manager - Hardcoded Credentials

Run This Scanner →

Est. Time~10 seconds

Scan TypeSingle Scan

Targetsdomain, subdomain, ipv4

CostFree

3.4k

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2020-4429

10.0

CVSScritical

Exploitable remotely over the internet · no authentication required.

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

Data Risk Managerby IBM

2.0.1

Updated Sep 9, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Run This Scanner →Browse All Tools

IBM Data Risk Manager - Hardcoded Credentials

Check your infrastructure.Right now.

Check your infrastructure.
Right now.