CVE-2026-84891: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.
Other sources
IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Guardium Data Protection GIM Windowsto a version that resolves this vulnerability.Patch Guardium_12.x.p102_r120204351_GIM_Windows
Event History
Frequently Asked Questions
Which deployments are affected?
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are identified as affected. The issue is specifically described as affecting the Windows GIM component.
What does an attacker need to exploit this issue?
The vulnerability is remotely exploitable and does not require privileges or user interaction. Exploitation has high attack complexity, according to the supplied vector.
What is the likely impact of successful exploitation?
A successful attacker could obtain sensitive information. The supplied severity vector indicates high confidentiality impact, with no stated integrity or availability impact.