{"vulnerability": "CVE-2020-4428", "sightings": [{"uuid": "9cb4e625-95c2-4a5c-a869-ee09b662018a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "cfe8290d-c0c3-43db-905f-06586d9ce978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "4a59a0d8-41d3-4e8d-88da-2917b9e17ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971058", "content": "", "creation_timestamp": "2024-12-24T20:23:40.151209Z"}, {"uuid": "933004a3-fe22-4dc6-9b3f-55d5f4f82842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "3d49b1ab-a92e-4ead-b3a0-0d0f698860e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:29.000000Z"}, {"uuid": "4970ee00-bd12-4624-9df9-d80dab913a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:48.000000Z"}, {"uuid": "3fae2f20-fe43-46c1-8aa0-264f8174cbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibm_drm_rce.rb", "content": "", "creation_timestamp": "2020-05-05T17:17:40.000000Z"}, {"uuid": "30b913e5-6d18-43e0-bb09-e3eca70b2532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-4428", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/669d317d-cf95-493e-8caa-bb113042cc52", "content": "", "creation_timestamp": "2026-02-02T12:28:47.233155Z"}, {"uuid": "644f2295-7024-49c1-9f50-d1ac87597d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "Telegram/VaVX-BwyOwF3A4RnHFwa4rQm-pe0peKoNvSIIxp8TqcX75mY", "content": "", "creation_timestamp": "2025-02-14T10:05:09.000000Z"}, {"uuid": "6b64be1d-0d30-4ab9-9059-909b2bc5cf48", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2f84d213-a9b8-4265-b121-1ffc436dde49", "content": "", "creation_timestamp": "2026-06-19T12:47:47.677379Z"}, {"uuid": "e810c41f-bdf7-48f3-9ec9-f827a11f21ff", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d3c32248-aed0-47e1-9455-de36ece6bae9", "content": "", "creation_timestamp": "2026-06-23T14:04:41.286528Z"}, {"uuid": "1ff6fda3-5aed-41ce-9ab5-79f875214c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-4428", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibm_drm_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"IBM Data Risk Manager (IDRM) contains three vulnerabilities that can be chained by\\n          an unauthenticated attacker to achieve remote code execution as root.\\n          The first is an unauthenticated bypass, followed by a command injection as the server user,\\n          and finally abuse of an insecure default password.\\n          This module exploits all three vulnerabilities, giving the attacker a root shell.\\n          At the time of disclosure this was an 0day, but it was later confirmed and patched by IBM.\\n          The authentication bypass works on versions <= 2.0.6.1, but the command injection should only work on\\n          versions <= 2.0.4 according to IBM.\", \"disclosure_date\": \"2020-04-21\", \"fullname\": \"exploit/linux/http/ibm_drm_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"IBM Data Risk Manager Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/ibm_drm_rce.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ibm_drm_rce\", \"references\": [\"CVE-2020-4427\", \"CVE-2020-4428\", \"CVE-2020-4429\", \"URL-https://github.com/pedrib/PoC/blob/master/advisories/IBM/ibm_drm/ibm_drm_rce.md\", \"URL-https://seclists.org/fulldisclosure/2020/Apr/33\", \"URL-https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-exist-in-ibm-data-risk-manager-cve-2020-4427-cve-2020-4428-cve-2020-4429-and-cve-2020-4430/\"], \"rport\": 8443, \"session_types\": false, \"targets\": [\"IBM Data Risk Manager <= 2.0.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.000908Z"}]}