Description
IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.
Published: 2026-10-08
Score: 7.8 High
EPSS: n/a
KEV: No
Impact: Privilege escalation to root (arbitrary code execution)
Action: Patch Now
AI Analysis

Impact

The patch installer for IBM Guardium Data Protection 12.2 performs digital signature verification to protect against tampering. A bug in this verification allows a local attacker to bypass the check and run arbitrary code with root privileges during installation. Although the flaw requires local access, the resulting escalation grants full system compromise and the ability to modify or exfiltrate protected data.

Affected Systems

IBM Guardium Data Protection version 12.2, deployed on Linux platforms, is vulnerable. The official fix is the SqlGuard_12.0p233_FixPack, which IBM publishes on its Fix Central site for the 12.2 release. Only this version is listed as affected; earlier releases are not referenced as impacted.

Risk and Exploitability

The CVSS score of 7.8 classifies the flaw as high severity. EPSS is not available, and the vulnerability is not currently listed in the CISA KEV catalog. The attack vector is local, requiring the attacker to have installation privileges or local system access. If the flaw is triggered, the attacker can achieve arbitrary code execution with root rights, giving full control over the host. The combination of high impact and local privilege escalation makes it a priority for rapid remediation.

Generated by OpenCVE AI on October 8, 2026 at 20:41 UTC.

Remediation

Vendor Solution

IBM encourages customers to update their systems promptly.  ProductVersions FixIBM Guardium Data Protection12.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p233_FixPack&includeSupersedes=0&source=fc

OpenCVE Recommended Actions

  • Apply the latest IBM Guardium Data Protection 12.2 fix pack (SqlGuard_12.0p233_FixPack) to restore proper signature verification.
  • Restrict local installation privileges to trusted administrators and disable unattended or unauthenticated installs.
  • Enable audit logging for patch installation events and monitor logs for anomalous activity.

Generated by OpenCVE AI on October 8, 2026 at 20:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 08 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Description IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges.
Title IBM Guardium Data Protection Signature Verification Bypass
First Time appeared Ibm
Ibm guardium Data Protection
Weaknesses CWE-362
CPEs cpe:2.3:a:ibm:guardium_data_protection:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:guardium_data_protection:12.2:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm guardium Data Protection
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Ibm Guardium Data Protection
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-10-08T19:06:41.084Z

Reserved: 2026-09-01T14:12:55.240Z

Link: CVE-2026-84271

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-08T20:17:37.610

Modified: 2026-10-08T20:49:50.083

Link: CVE-2026-84271

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T21:00:11Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')