The vulnerability in IBM Guardium Data Protection 12.2 and 12.2.2 arises from missing authentication checks for a critical management function. A remote attacker who can reach the vulnerable system can invoke this function and perform arbitrary management operations. Because these operations can modify protection policies, user accounts, or system configurations, the flaw effectively grants remote code execution or full administrative control over the Guardium deployment, compromising confidentiality, integrity, and availability of the protected data.

IBM Guardium Data Protection, versions 12.2 and 12.2.2, as identified by the vendor. The affected releases are listed in the vendor’s fix instructions; the patch notes indicate that the issue is fixed in version 12.2.3 and later releases.

The flaw carries a CVSS score of 9.8, indicating critical severity. The EPSS score is not available, so it is unclear how frequently the vulnerability is being targeted, but the absence of a KEV listing does not reduce its potential impact. The likely attack vector is remote, as the missing authentication allows unauthenticated access over the network. An attacker would need network connectivity to the Guardium appliance and the ability to send the specific management command to exploit the flaw. Any compromise could lead to uncontrolled changes to the system or execution of arbitrary code.