CVE-2020-4427 Scanner
CVE-2020-4427 Scanner - Unauthorized Admin Access vulnerability in IBM Data Risk Manager
Used 3k times · 5.9k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2020-4427
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
data risk manager
Updated Sep 25, 2026View on NVD →
S4E scanner
CVE history: data risk manager
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →