PT-2020-6502 · Ibm · Ibm Data Risk Manager

Pedro Ribeiro · Published 2020-05-07 · Updated 2025-11-04 · CVE-2020-4427

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Data Risk Manager versions 2.0.1 through 2.0.6

Description The issue is related to the implementation of SAML (Security Assertion Markup Language) technology in IBM Data Risk Manager, which is associated with deficiencies in the authentication mechanism. By sending a specially crafted HTTP request, a remote attacker could exploit this to bypass security restrictions and gain full administrative access to the system when configured with SAML authentication.

Recommendations For IBM Data Risk Manager versions 2.0.1 through 2.0.6, consider disabling SAML authentication as a temporary workaround until a patch is available. Restrict access to the system to minimize the risk of exploitation. Avoid using the vulnerable authentication mechanism in the affected system until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-05529

CVE-2020-4427

Affected Products

Ibm Data Risk Manager

References · 18

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibm_drm_rce.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/ibm_drm_download.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-4427 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/180532 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-4427 · Vendor Advisory
• https://ibm.com/support/pages/node/6206875 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05529 · Security Note
• http://seclists.org/fulldisclosure/2024/Nov/1 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cveNotify/141445 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1977328425867092294 · Twitter Post
• https://exploit.kitploit.com/2020/05/ibm-data-risk-manager-203-remote-code.html · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-4427 · Note
• https://t.me/cveNotify/141623 · Telegram Post
• https://t.me/cvenotify/111108 · Telegram Post