Executive brief
IBM Guardium Data Protection is a security tool that monitors and protects databases. A local attacker with basic user privileges can exploit improper privilege management to gain elevated system access, potentially allowing them to compromise sensitive data or disrupt database protection controls.
Technical details
A privilege management flaw in Guardium Data Protection 12.2 allows local authenticated users to escalate their privileges. The vulnerability requires local network access and existing user credentials but no additional user interaction. An attacker gains root or administrative privileges on the affected system.
Affected products
- IBM Guardium Data Protection 12.2
Timeline
- 2026-09-18: disclosed