S4E just found a medium-severity finding from http apache server status scanner

CVE

CVE-2020-4429

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account. A remote attacker could exploit this vulnerability to login and execute arbitrary code on the system with root privileges. IBM X-Force ID: 180534.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

data risk manager

Updated Oct 12, 2026View on NVD →

S4E scanner

criticalProduct Based Network Vulnerabilities~10 seconds

CVE-2020-4429 Scanner

CVE-2020-4429 Scanner - Hard-Coded Credentials vulnerability in IBM Data Risk Manager

Used 2.1k times · 3.4k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: data risk manager

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →