CVE-2026-84842: IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.
Other sources
IBM Security Guardium Data Protection is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated remote attacker could exploit this vulnerability to delete files and potentially cause denial of service or impact system integrity.
— IBM
Affected Software
Remediation
Information
Patch Available
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated and able to reach the Datasource REST component remotely.
What is the practical impact of successful exploitation?
An attacker could delete files through path traversal, which could cause denial of service and potentially affect system integrity.