CVE-2026-84274

Ibm Guardium Data Protection: information disclosure

Risk score: 42/100
CVSS: 6.5 v3.1
Exploit chance (30 days): 0.2%
Published: 8 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or co…
Affected: Ibm Guardium Data Protection
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Story map

Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Ibm Guardium Data Protection: Amber, patch this week. IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.

The flaws

CVE-2026-84274: Information disclosure (CVSS 6.5 · EPSS 0%)
CVE-2026-75875: Path traversal can lead to remote code execution (CVSS 9.8 · EPSS 1%)
CVE-2026-84249: Missing authentication (CVSS 9.8 · EPSS 0%)
CVE-2026-84272: Missing authentication (CVSS 9.8 · EPSS 0%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Ibm Guardium Data Protection

Where it stands

No known exploitation

Connects to

Same weakness: Information disclosure (CWE-200). 197 other warnings in 30 days
Same product: Earlier Ibm Guardium Data Protection warnings. 37 in the last 90 days

Why it is Yellow

CVSS 6.5 medium

References

https://www.ibm.com/support/pages/node/7288627

Original description

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.

Last activity 8 Oct 2026. Patch Forecast updates every hour.