4.9
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Basic Information
ID
CVE-2026-4917
Source
ibm
Published
Apr 22, 2026 at 23:27
Affected Product
Vendor
IBM
Product
Guardium Data Protection
Version
12.1
Affected Versions
IBM Guardium Data Protection 12.1