CVE-2020-4427criticalunder attackCWE-287

CVE-2020-4427: critical vulnerability in IBM Data Risk Manager

Published · Updated

95Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9epss 70%
from disclosure to weapon0 days
Published on NVDMay 7
metasploitApr 21
CISA KEV+545d
exploitation probability
70%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

IBM Data Risk Manager versions 2.0.1 through 2.0.6 have a flaw in their SAML authentication that allows attackers to skip login and gain full admin access by sending a specially crafted HTTP request. This puts all data in the system at risk of being stolen or modified.

Technical detail

The vulnerability is an authentication bypass in SAML-configured instances of IBM Data Risk Manager affecting versions 2.0.1–2.0.6. An unauthenticated remote attacker can craft a malicious HTTP request to circumvent SAML authentication validation, resulting in unauthorized administrative access and full system compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.
CVSS:3.0/I:H/UI:N/PR:N/C:H/A:H/AV:N/S:C/AC:H/RL:O/RC:C/E:U
Affected products
IBM · Data Risk Manager
Related CVEs — IBM Data Risk Manager

In the same product, most dangerous first.

CVE-2020-4430MEDIUMCVE-2020-4430EPSS 68.5%KEVCVE-2020-4428CRITICALCVE-2020-4428EPSS 61.7%KEVCVE-2020-4429CRITICALCVE-2020-4429EPSS 72.0%CVE-2020-4620HIGHCVE-2020-4620EPSS 5.2%CVE-2020-4616MEDIUMCVE-2020-4616EPSS 1.7%CVE-2020-4611HIGHCVE-2020-4611EPSS 1.6%
References
http://seclists.org/fulldisclosure/2024/Nov/0http://seclists.org/fulldisclosure/2024/Nov/1https://exchange.xforce.ibmcloud.com/vulnerabilities/180532https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4427https://www.ibm.com/support/pages/node/6206875