The vulnerability stems from the use of a hard‑coded cryptographic key in IBM Guardium Data Protection 12.1 and 12.2, enabling a remote attacker to decrypt protected data. Because the key is embedded in the product, the attacker can bypass intended confidentiality protections and obtain sensitive information transmitted or stored by the Guardium appliance. This results in a direct compromise of data confidentiality.

IBM Guardium Data Protection versions 12.1 and 12.2 are affected. Updated releases contain the key removal fix: 12.1 patch SqlGuard_12.0p150_Bundle and 12.2 patch SqlGuard_12.0p233_FixPack, available through IBM’s Fix Central for Linux or platform‑agnostic platforms.

The CVSS base score is 8.1, indicating a high severity flaw. The EPSS score is less than 1 percent, suggesting low exploitation probability as of now, and the vulnerability is not listed in CISA’s KEV catalog. Attackers would need remote access to a Guardium appliance to exploit the defect, likely through privileged interfaces or exposed management services, though the exact vector is not detailed in the advisory, so it is inferred that the attack is remote and requires authentication or possession of privileged credentials.