CVE-2026-84891
MediumCVSS 5.9Summary
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to the use of hard-coded credentials.
Risk Assessment
Hard-coded credentials may be exploited for unauthorized access to the data protection system and information leakage. This poses a serious risk to the confidentiality of organizational data.
Recommendation
Update IBM Guardium Data Protection to a version that removes the hard-coded credentials, or apply the vendor's guidance to change them. Review access logs for unauthorized login attempts.
Other vulnerabilities in IBM Guardium Data Protection
See all- CVE-2026-87980Low
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 store sensitive information in cleartext in logs. A local attacker can access this data.
- CVE-2026-84875High
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
- CVE-2026-84247High
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
- CVE-2026-84246High
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
- CVE-2026-84230High
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map.
- CVE-2026-84209High
IBM Guardium Data Protection versions 12.2.2 and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command.
- CVE-2026-84198High
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
- CVE-2026-84058High
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a specially crafted TDS PRELOGIN packet to a network monitored by an IBM Guardium Collector may cause a denial of service or potentially execute arbitrary code on the Collector appliance.
- CVE-2026-84057High
IBM Guardium Data Protection versions 12.2.2 and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
- CVE-2026-84035High
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 contain a stack-based buffer overflow vulnerability. A remote attacker could exploit this flaw to execute arbitrary code within the application context.
Original NVD description (English source)
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS