2.0.5

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-22	CVE-2020-4612	Unspecified vulnerability in IBM Data Risk Manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially crafted HTTP request. network low complexity ibm	6.5
2020-09-22	CVE-2020-4611	Unspecified vulnerability in IBM Data Risk Manager IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for admins. network low complexity ibm	8.8
2020-05-07	CVE-2020-4429	Use of Hard-coded Credentials vulnerability in IBM Data Risk Manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. network low complexity ibm CWE-798 critical	9.8
2020-05-07	CVE-2020-4427	Unspecified vulnerability in IBM Data Risk Manager IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. network low complexity ibm critical	9.8