CVE Watch—

CVE-2020-4427

IBM Data Risk Manager Security Bypass Vulnerability

CVSS

—

Sem CVSS

EPSS

70.0%

p99

KEV

SIM

3 de nov. de 2021

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

70.0%EPSS · 30 dias70.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

IBM / Data Risk Manager

Vulnerabilidade

IBM Data Risk Manager Security Bypass Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2020-4427

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2020-4430—

99.3%

KEV—80IBM Data Risk Manager Directory Traversal Vulnerability—CVE-2020-4428—

99.2%

KEV—80IBM Data Risk Manager Remote Code Execution Vulnerability—