rootpwn

critical · CVSS v3 9.9

CVE-2026-84075

IBM Guardium Data Protection 12.2 contains a security restriction bypass vulnerability in the ChangeTrackerServlet. The flaw stems from miss

Overview

IBM Guardium Data Protection 12.2 contains a security restriction bypass vulnerability in the ChangeTrackerServlet. The flaw stems from missing authentication controls, which allows remote unauthenticated attackers to access sensitive functionality. This issue is critical as it directly undermines the access control boundaries of a core data security platform.

Description

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet.

Impact

This vulnerability impacts the confidentiality and integrity of the Guardium Data Protection environment by allowing unauthorized remote access to sensitive components. Organizations relying on this platform for database activity monitoring and compliance are at risk of data exposure or unauthorized configuration visibility. Administrators and security teams responsible for database security governance are directly affected.

Remediation

Apply the official vendor-supplied patches or interim fixes provided by IBM for Guardium Data Protection 12.2. Restrict network access to the administrative and servlet endpoints using firewalls or reverse proxies as a compensating control. Monitor application access logs for anomalous requests targeting the ChangeTrackerServlet.

Risk context

Rated as critical with a CVSS v3 score of 9.9, this vulnerability requires immediate attention due to the potential for unauthenticated remote exploitation against a core security product. EPSS data is not currently available, but the high severity demands prioritization based on exposure.

Affected products

  • IBM Guardium Data Protection 12.2

Scores

Severity
critical
CVSS v2
9
CVSS v3
9.9
CVSS v4
—
EPSS
—

IBM Guardium Authentication Bypass Critical Data Protection Servlet Remote Access

← All CVEs

Related CVEs

critical

CVE-2026-93922

SiYuan up to version 3.8.4 fails to properly sanitize notebook names when rendering them within the Daily Note picker dialog. This vulnerability leads to stored cross-site scripting inside the application's Electron renderer context. Because the renderer possesses Node.js integration, the resulting JavaScript execution escalates into full operating system command execution on the host machine.

View analysis

critical

CVE-2026-93923

SiYuan up to version 3.8.4 contains a stored cross-site scripting vulnerability in its outline and bookmark dock HTML rendering. Attackers can inject malicious style values through crafted notebooks or administrative endpoints. This vulnerability matters because the application runs within an Electron renderer with full system access.

View analysis

critical

CVE-2026-82967

IBM Guardium Data Protection 12.2 contains an authentication bypass vulnerability within its access control mechanism. This flaw allows unauthenticated remote attackers to circumvent IP-based access restrictions and reach the management interface. It matters because it exposes critical database security and monitoring infrastructure to unauthorized external parties.

View analysis

critical

CVE-2026-84031

IBM Guardium Data Protection 12.2 contains a vulnerability involving improper neutralization of input during web page generation. This flaw permits a remote authenticated attacker to execute arbitrary code within the affected system. It matters because successful exploitation compromises the integrity and confidentiality of sensitive database security monitoring infrastructure.

View analysis