{"id":"CVE-2020-4427","aliases":["EUVD-2020-25674","GHSA-24c2-gvwg-5p45"],"status":"published","title":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker...","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.","severity":{"version":"3.0","score":9,"vector":"CVSS:3.0/I:H/UI:N/PR:N/C:H/A:H/AV:N/S:C/AC:H/RL:O/RC:C/E:U","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.70031,"percentile":0.99382,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-287"],"published":"2020-05-07T19:20:18Z","modified":"2026-06-17T03:19:58Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/ibm_drm_rce","title":"IBM Data Risk Manager Unauthenticated Remote Code Execution","type":"exploit","platform":"Linux","date":"2020-04-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/ibm_drm_rce"},{"source":"metasploit","id":"exploit/linux/ssh/ibm_drm_a3user","title":"IBM Data Risk Manager a3user Default Password","type":"exploit","platform":"Unix","date":"2020-04-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/ssh/ibm_drm_a3user"},{"source":"metasploit","id":"auxiliary/admin/http/ibm_drm_download","title":"IBM Data Risk Manager Arbitrary File Download","type":"auxiliary","date":"2020-04-21","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/admin/http/ibm_drm_download"},{"source":"nuclei","id":"CVE-2020-4427","title":"IBM Data Risk Manager - Authentication Bypass via SAML","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4427.yaml"}],"products":[{"vendor":"ibm","product":"data risk manager"},{"vendor":"ibm","product":"data_risk_manager"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6206875","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/180532","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/1","tags":["Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4427","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-4427"},{"url":"https://github.com/advisories/GHSA-24c2-gvwg-5p45"}],"sources":{"cve":[{"id":"CVE-2020-4427","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.","status":"published","published":"2020-05-07T19:20:18.815Z","modified":"2025-11-03T21:44:23.533Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/I:H/UI:N/PR:N/C:H/A:H/AV:N/S:C/AC:H/RL:O/RC:C/E:U","level":"critical","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:35:56.213477Z"}],"euvd":[{"id":"EUVD-2020-25674","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.","status":"published","published":"2020-05-07T19:20:18Z","modified":"2025-11-03T21:44:23Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/I:H/UI:N/PR:N/C:H/A:H/AV:N/S:C/AC:H/RL:O/RC:C/E:U","level":"critical"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T19:49:31.7352Z"}],"ghsa":[{"id":"GHSA-24c2-gvwg-5p45","title":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker...","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.","status":"published","published":"2022-05-24T17:17:27Z","modified":"2025-11-04T00:30:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:25.970519Z"}],"kev":[{"id":"CVE-2020-4427","title":"IBM Data Risk Manager Security Bypass Vulnerability","description":"IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2020-4427","description":"IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.","status":"published","published":"2020-05-07T20:15:12.627Z","modified":"2026-06-17T03:19:58.397Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:06:00.784809Z"}]}}