Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-4427

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.51
EPSS Ranking 97.8%
CVSS Severity
CVSS v3 Score 9.0
CVSS v2 Score 9.0
Proposed Action
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.
Ransomware Campaign
Unknown
Products affected by CVE-2020-4427


Products
Pricing
Contact Us

Shodan ® - All rights reserved