CVE-2026-84884: Guardium Data Protection: güvenlik açığı

Açıklama (NVD)

IBM Guardium Data Protection 12.2 stores internal REST service-account passwords in a reversible plaintext-equivalent format. An authenticated attacker who gains access to the stored credential could recover the password and obtain an administrative REST access token.

Özet bilgiler

Ürün

Ibm Guardium Data Protection

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,24 (yüzdelik 16)

CWE

CWE-256

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.ibm.com
• CWE-256