CVE-2026-84278: Guardium Data Protection: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.

Özet bilgiler

Ürün

Ibm Guardium Data Protection

CVSS v3.1

7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

%2,48 (yüzdelik 85)

CWE

CWE-78

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.ibm.com
• CWE-78