Description
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
Published: 2026-09-18
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Local Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

IBM Guardium Data Protection 12.2 contains improper privilege management, identified as CWE-269, that allows a local attacker to gain elevated privileges. This flaw enables unauthorized users to execute privileged actions with system‑level permissions, compromising data integrity, confidentiality, and overall system security.

Affected Systems

IBM Guardium Data Protection version 12.2 on Linux is affected. The fix is available as the SqlGuard_12.0p233_FixPack for this product.

Risk and Exploitability

The CVSS score of 7.8 indicates high severity. Exploitation takes place when a local user achieves administrative privileges, potentially allowing data theft or tampering. The EPSS score is not available, so the likelihood of exploitation is uncertain, and the vulnerability is not listed in CISA KEV. However, the high impact and local attack vector mean administrators should prioritize remediation.

Generated by OpenCVE AI on September 19, 2026 at 11:54 UTC.

Remediation

Vendor Solution

IBM encourages customers to update their systems promptly.  ProductVersions FixIBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p233_FixPack&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply IBM's provided fix pack SqlGuard_12.0p233_FixPack to update Guardium Data Protection 12.2.
  • If the update cannot be applied immediately, restrict local user privileges and enforce least privilege, ensuring that only authorized accounts have administrative access to Guardium.
  • Implement monitoring of local privilege escalation attempts and audit logs to detect any unauthorized access.

Generated by OpenCVE AI on September 19, 2026 at 11:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 19 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 18 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
Title IBM Guardium Data Protection is affected by multiple vulnerabilities.
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-269
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-09-23T03:55:50.108Z

Reserved: 2026-08-31T09:15:06.227Z

Link: CVE-2026-82893

cve-icon Vulnrichment

Updated: 2026-09-19T14:05:15.455Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-18T20:17:25.273

Modified: 2026-10-06T15:38:38.833

Link: CVE-2026-82893

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T03:15:07Z

Weaknesses
  • CWE-269

    Improper Privilege Management