CVE-2020-4427VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-4427: IBM Data Risk Manager Security Bypass Vulnerability

Affects IBM Data Risk ManagerSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 70.0% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-4427 (opens in a new tab)

Description

IBM Data Risk Manager has a security bypass vulnerability (CVE-2020-4427) that affects configurations using SAML authentication. An attacker can send a specially crafted HTTP request to bypass authentication and gain full administrative access. This vulnerability has been exploited in the wild and is considered high severity.

Summary

CVE-2020-4427 describes a security bypass vulnerability in IBM Data Risk Manager when configured with SAML authentication. The flaw allows a remote attacker to bypass security restrictions by sending a specially crafted HTTP request, resulting in unauthorized full administrative access to the system. The vulnerability has been observed exploited in the wild. No specific affected versions or patch information is provided in the available data.

Impact

Successful exploitation allows a remote attacker to bypass authentication and gain full administrative privileges on IBM Data Risk Manager systems configured with SAML authentication. This could lead to complete compromise of the affected system.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider disabling SAML authentication if feasible or implementing additional access controls to limit exposure.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:20:39 UTC

References

Related threats