CVE-2026-84032: IBM Guardium Data Protection is affected by multiple vulnerabilities
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.
Other sources
IBM Guardium Data Protection could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Fixed in 12.2.3Patch SqlGuard_12.0p15004_Edge
Event History
Frequently Asked Questions
What must an attacker be able to do to exploit this issue?
The attacker must be able to position themselves to conduct a man-in-the-middle attack against affected IBM Guardium Data Protection communications. The vulnerability is remotely exploitable and does not require privileges or user interaction, but the attack complexity is rated high.
Which version is identified as affected?
IBM Guardium Data Protection 12.2.2 is identified as affected.
What security impact could a successful attack have?
A successful man-in-the-middle attack could compromise confidentiality, integrity, and availability to a low extent.