Actively exploited in the wild
IBM Data Risk Manager Security Bypass Vulnerability
IBM - Data Risk Manager · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-4427
CriticalCVSS 9.8KEVSummary
IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could bypass authentication and gain full administrative access.
Risk Assessment
An attacker can gain full administrative access to the system, leading to complete takeover of the application and its data.
Recommendation
Update IBM Data Risk Manager to the latest version and verify SAML configuration for anomalies.
Other vulnerabilities in IBM Data Risk Manager
See all- CVE-2020-4430MediumActively exploited
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to download arbitrary files from the system.
- CVE-2020-4428CriticalActively exploited
IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system.
Original NVD description (English source)
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS