rootpwn

high · CVSS v3 7.8

CVE-2026-82893

IBM Guardium Data Protection 12.2 contains an improper privilege management vulnerability. This flaw allows a local user to escalate their p

Overview

IBM Guardium Data Protection 12.2 contains an improper privilege management vulnerability. This flaw allows a local user to escalate their privileges within the underlying operating environment. Addressing this issue is critical to maintaining strict access controls on database security appliances.

Description

IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.

Impact

An authenticated local attacker with low-level access can exploit this vulnerability to achieve elevated privileges on the affected system. This compromises the confidentiality, integrity, and availability of the Guardium appliance and potentially the sensitive database audit logs it manages. Database administrators and security teams relying on this platform are directly impacted.

Remediation

Apply the latest official security patches or fix packs provided by IBM for Guardium Data Protection 12.2. Restrict local shell access and strictly audit user accounts with access to the underlying operating system. Implement the principle of least privilege for all local users on database security appliances.

Risk context

Rated as a high severity vulnerability with a CVSS v3 score of 7.8, it presents a significant risk if local system access is compromised. EPSS data is currently not available for this CVE, but organizations should prioritize patching based on their local threat model and exposure to untrusted local users.

Affected products

  • IBM Guardium Data Protection 12.2

Scores

Severity
high
CVSS v2
6.8
CVSS v3
7.8
CVSS v4
—
EPSS
—

IBM Guardium Privilege Escalation Local Access High Severity Access Control

← All CVEs

Related CVEs

high

CVE-2026-93455

django-page-cms through version 2.0.13 contains an authorization bypass vulnerability in its admin helper views. The flaw allows low-privilege staff accounts to read unpublished drafts, page listings, and stored media paths without proper permission validation. This matters because it exposes sensitive organizational content to internal users who should not have access.

View analysis

high

CVE-2026-52727

The lxc-ci project inadvertently included a static pacman local-signing private key within Arch Linux container and virtual machine images built prior to May 28, 2026. This allows a malicious or compromised package mirror to issue cryptographically trusted packages to clients. Consequently, attackers can achieve arbitrary code execution as root on affected systems.

View analysis

high

CVE-2026-82892

IBM Guardium Data Protection 12.2 contains an OS command injection vulnerability. This flaw allows a remote attacker to execute arbitrary commands on the underlying system. It matters because successful exploitation could lead to full system compromise of sensitive database security monitoring infrastructure.

View analysis

high

CVE-2026-82896

IBM Guardium Data Protection 12.2 contains a path traversal vulnerability that allows remote authenticated attackers to access unauthorized directories on the underlying system. This flaw matters because it exposes sensitive system files and compromises the data integrity of the security platform.

View analysis