IBM Guardium Data Protection 12.2 contains a path traversal flaw that a remote authenticated attacker can exploit to trigger a denial of service. The flaw allows the attacker to reference arbitrary filesystem paths, leading to a denial of service. The weakness is identified as CWE‑22 and does not provide code execution or privilege escalation. The impact is on availability for a compromised account.

The flaw targets IBM Guardium Data Protection version 12.2.0 (12.2) as listed in the product fix information. No additional platforms or downstream components are explicitly mentioned in the vulnerability data.

The CVSS score of 8.1 reflects a high severity for denial of service that requires authentication. EPSS is not available, indicating limited publicly known exploitation data, and the vulnerability is not included in the CISA KEV catalog. The attack vector is remote over an authenticated connection, meaning that privileged users or compromised credentials provide the necessary access. Exploitation would result in service outages for users dependent on the Guardium appliance, affecting availability.