CVE-2020-4427
IB
IBM Data Risk Manager
IBM Data Risk Manager Security Bypass Vulnerability
What it is
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other IBM entries on the list
- Aspera Faspex IBM Aspera Faspex Incorrect Authorization Vulnerability CVE-2026-123218 · Nov 9, 2026
- Langflow IBM Langflow Code Injection Vulnerability CVE-2026-9198 · Aug 4, 2026
- Aspera Faspex IBM Aspera Faspex Code Execution Vulnerability CVE-2022-47986 · Feb 21, 2023
- InfoSphere BigInsights IBM InfoSphere BigInsights Invalid Input Vulnerability CVE-2013-3993 · May 25, 2022
- WebSphere Application Server and Server Hypervisor Edition IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CVE-2015-7450 · Jan 10, 2022
- Data Risk Manager IBM Data Risk Manager Directory Traversal Vulnerability CVE-2020-4430 · Nov 3, 2021