← Back to browse · API

CVE-2020-4427

Severity
CRITICAL
CVSS
9.0
EPSS
0.70031
Risk score
85.51
CISA KEV
Yes
PoC
No
Published
2021-11-03
Modified
2021-11-03
First seen
2026-08-07
Aliases
EUVD-2020-25674, GHSA-24C2-GVWG-5P45
Products
IBM:Data Risk Manager, IBM:Data Risk Manager 2.0.1, IBM:Data Risk Manager 2.0.2, IBM:Data Risk Manager 2.0.3, IBM:Data Risk Manager 2.0.4, IBM:Data Risk Manager 2.0.5, IBM:Data Risk Manager 2.0.6
Sources
euvd EUVD-2020-25674
cisa.gov CVE-2020-4427

Description

IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.

References