Description
(CVE-2020-4427) IBM Data Risk Manager SAML身份验证绕过漏洞 逻辑漏洞
(CVE-2020-4427) IBM Data Risk Manager SAML身份验证绕过漏洞 逻辑漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2020-4427
https://www.ibm.com/support/pages/security-bulletin-vulnerabilities-exist-ibm-data-risk-manager-cve-2020-4427-cve-2020-4428-cve-2020-4429-and-cve-2020-4430
https://www.cve.org/CVERecord?id=CVE-2020-4427
https://github.com/pedrib/PoC/blob/master/advisories/IBM/ibm_drm/ibm_drm_rce.md
https://exchange.xforce.ibmcloud.com/vulnerabilities/180532
https://www.appsecure.security/vulnerability-database/cve-2020-4427/
https://seclists.org/fulldisclosure/2020/Apr/33
https://www.theregister.com/security/2020/06/23/what-did-it-take-for-stubborn-ibm-to-fix-flaws-in-its-data-risk-manager-security-software-someone-dropping-zero-days/1476223
https://pentest-tools.com/vulnerabilities-exploits/ibm-data-risk-manager-authentication-bypass-via-saml_27925
https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/http/cves/2020/CVE-2020-4427.yaml