CVE-2026-84077: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.
Other sources
IBM Guardium Data Protection could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Fixed in 12.2Patch SqlGuard_12.0p233_FixPack
Event History
Frequently Asked Questions
What does an attacker need in order to exploit this issue?
The issue is described as a cross-site request forgery vulnerability, so exploitation involves causing a request to be made in the context of a user who is authenticated to the affected IBM Guardium Data Protection instance. The provided data does not specify the actions that can be performed or any additional prerequisites.
How broadly is this exposed?
The vulnerability is identified as remotely exploitable in IBM Guardium Data Protection. The provided information does not state which deployments, configurations, versions, or interfaces are affected.