CVE-2026-84249: IBM Guardium Data Protection is affected by vulnerability
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protectionto a version that resolves this vulnerability.Fixed in 12.2.3Patch SqlGuard_12.0p15004_Edge
Event History
Frequently Asked Questions
Which deployments are affected?
IBM Guardium Data Protection versions 12.2 and 12.2.2 are identified as affected.
Does exploitation require credentials or user interaction?
No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What could a successful attacker do?
A remote attacker could execute arbitrary management operations because authentication is missing for a critical function. The reported impact includes high confidentiality, integrity, and availability impact.