IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.ibm.com/support/pages/node/7288035 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · ibmNVD modified 2026-10-09 16:17
Affected (CPE criteria) 1
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
References 1
- https://www.ibm.com/support/pages/node/7288035 Vendor Advisory