CVE-2020-4427

CRITICAL9.8

CISA KEV

Published 2020-05-07 · Updated 2026-06-17 · Source psirt@us.ibm.com

Summary

CVE-2020-4427 is a critical-severity (CVSS 9.8) vulnerability in IBM Data Risk Manager. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA does not currently list it as used in ransomware campaigns. IBM has 8 vulnerabilities in the KEV catalog, 2 of them linked to ransomware.

All 8 known-exploited IBM vulnerabilities →

Description

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system. IBM X-Force ID: 180532.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-287

CISA Known-Exploited Vulnerability

Product: IBM — Data Risk Manager

Name: IBM Data Risk Manager Security Bypass Vulnerability

Date added: 2021-11-03 · Due: 2022-05-03

Required action: Apply updates per vendor instructions.

References

View on NVD

More exploited IBM vulnerabilities

Most recently added to CISA KEV

CVE-2026-9198
Langflow — IBM Langflow Code Injection Vulnerability
added 2026-08-04
CVE-2022-47986
RANSOMWARE
Aspera Faspex — IBM Aspera Faspex Code Execution Vulnerability
added 2023-02-21
CVE-2013-3993
RANSOMWARE
InfoSphere BigInsights — IBM InfoSphere BigInsights Invalid Input Vulnerability
added 2022-05-25
CVE-2015-7450
WebSphere Application Server and Server Hypervisor Edition — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
added 2022-01-10
CVE-2020-4430
Data Risk Manager — IBM Data Risk Manager Directory Traversal Vulnerability
added 2021-11-03
CVE-2020-4428
Data Risk Manager — IBM Data Risk Manager Remote Code Execution Vulnerability
added 2021-11-03

View all →

Related CVEs

Same severity, most recent

CVE-2026-124060
A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
2026-11-07 · score 9.1
CVE-2026-124059
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ApCliKeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
2026-11-07 · score 9.1
CVE-2026-124058
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument ApCliKeyStr can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
2026-11-07 · score 9.1
CVE-2026-124057
A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
2026-11-07 · score 9.1
CVE-2026-123966
A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentControlInfo. This manipulation of the argument deviceId causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
2026-11-07 · score 10.0