CVE 4.9 MEDIUM

IBM Guardium Data Protection is affected by multiple vulnerabilities_CVE-2026-4917

4.9 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Description

IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

Basic Information

ID CVE-2026-4917
Source ibm
Published Apr 22, 2026 at 23:27

Affected Product

Vendor IBM
Product Guardium Data Protection
Version 12.1
Affected Versions IBM Guardium Data Protection 12.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.