The vulnerability identified as CWE-200 allows an attacker to acquire sensitive credentials from IBM Guardium Data Protection when the Long Term Retention feature is run in debug mode. The bug permits exposure of sensitive information, potentially leading to credential compromise and further access to protected data. The impact is confined to the data exposed by the debug mode and does not grant arbitrary code execution or other higher‑level privileges.

Guardium Data Protection versions 12.2.1 and 12.2.2 are affected. The exposure occurs via the Long Term Retention (LTR) add‑on feature. Customers running these releases should verify that the LTR debug mode is disabled or apply the vendor‑issued security fixes provided by IBM.

CVSS score of 6.5 indicates a moderate risk. EPSS score of < 1% indicates a very low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed exploitation in the wild. Based on the description, it is inferred that the attack vector requires privileged access or control over the debug configuration of LTR, and exploitation would be easiest when an attacker can trigger debug mode. Given the moderate CVSS and lack of known exploitation, the threat remains manageable but should be mitigated promptly.