The vulnerability is an improper input validation flaw that allows a remote authenticated attacker to retrieve sensitive information. Because the flaw exists in the input handling code, attackers who have authenticated credentials can supply crafted data that bypasses validation checks, potentially exposing confidential business or system information. The flaw is classified as CWE‑20 and is reflected in a CVSS score of 3.1, indicating limited impact if an attacker is able to authenticate.

IBM Guardium Data Protection, version 12.2.4 is affected by this issue. The release of a fix for this version is available via IBM"s support portal. No other versions are listed as impacted.

The CVSS score of 3.1 indicates low overall severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, which suggests a low likelihood of widespread exploitation. However, because the problem requires authenticated access, only users with valid credentials could exploit the flaw. The risk is therefore moderate, limited to environments where privileged users are compromised or where authentication controls are weak.