CVE-2020-4427

IBM Data Risk Manager Security Bypass Vulnerability

IBM — Data Risk Manager

Added to KEV catalog: 3 November 2021
Federal remediation due date: 3 May 2022

CISA Description

IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-4427

View on NVD View on MITRE CVE View full CISA catalog

More IBM Vulnerabilities

CVE-2026-9198

IBM Langflow Code Injection Vulnerability

CVE-2022-47986

IBM Aspera Faspex Code Execution Vulnerability

CVE-2013-3993

IBM InfoSphere BigInsights Invalid Input Vulnerability

CVE-2015-7450

IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

CVE-2020-4430

IBM Data Risk Manager Directory Traversal Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services