Executive brief
IBM Guardium Data Protection is a database security monitoring and auditing system used to protect sensitive data in enterprise databases. A flaw in its certificate validation allows remote attackers to bypass security controls, potentially enabling man-in-the-middle attacks to intercept or manipulate database traffic and compromise data confidentiality and integrity.
Technical details
Improper certificate validation in IBM Guardium Data Protection 12.2 allows an unauthenticated remote attacker to bypass security restrictions via network-based man-in-the-middle attacks. The vulnerability affects certificate validation mechanisms and does not require user interaction or prior authentication. Exploitation could lead to interception or manipulation of supposedly encrypted communications.
Affected products
- IBM Guardium Data Protection 12.2
Timeline
- 2026-09-18: disclosed