CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-05-07
IBM Data Risk Manager SAML Authentication Bypass and Remote Admin Access Vulnerability (CVE-2020-4427)
[Affected Scope] IBM Data Risk Manager versions 2.0.1 through 2.0.6 configured with SAML authentication.
[Impact] A remote attacker can bypass the authentication process and gain full administrative access to the system by sending a specially crafted HTTP request.
[Mitigation] Apply the official security patches provided by IBM, or restrict access to SAML endpoints and review authentication configurations.