IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7288036 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 3
- Cpes+2 CPE criteria (now 2)NVD modified 2026-10-15 17:08
- StatusUndergoing Analysis → AnalyzedNVD modified 2026-10-15 17:08
- First seenCVSS 9.8NVD modified 2026-10-10 04:18
Affected (CPE criteria) 2
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*cpe:2.3:a:ibm:guardium_data_protection:12.2.2:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7288036 Vendor Advisory