Actively exploited in the wild
IBM Data Risk Manager Security Bypass Vulnerability
IBM - Data Risk Manager · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-4427
CriticalCVSS 9.8KEVSummary
IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could bypass authentication and gain full administrative access.
Risk Assessment
An attacker can gain full administrative access to the system, leading to complete takeover of the application and its data.
Recommendation
Update IBM Data Risk Manager to the latest version and verify SAML configuration for anomalies.
Other vulnerabilities in IBM Data Risk Manager
Original NVD description (English source)
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.