IBM Guardium Data Protection 12.2.2 includes an improper certificate validation weakness that can enable a remote attacker to perform a man‑in‑the‑middle attack, potentially intercepting, replaying, or modifying data in transit. The flaw compromises confidentiality and integrity of communication between Guardium and its protected resources, and could allow unauthorized data access.

The vulnerability affects IBM Guardium Data Protection version 12.2.2 running on Linux platforms. IBM has released a patch that updates the product to version 12.2.3, which addresses the certificate handling issue.

The CVSS score of 5.6 indicates moderate severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog. The most likely exploitation scenario involves a remote adversary who can see traffic to and from the Guardium appliance; by presenting a forged certificate they can intercept and potentially tamper with traffic. Privilege escalation is not required; the attack requires the ability to interfere with network traffic between Guardium and the target systems.