CVE-2026-84034

Summary

The flaw is a hardcoded credentials vulnerability in IBM Guardium Data Protection 12.2, allowing low-privileged authenticated users to recover sensitive secrets, potentially leading to unauthorized access and data compromise.

Exploitability

Exploitation is relatively straightforward for a low-privileged authenticated user, requiring access to the hardware_assess/obstore binaries.

Blast radius

If exploited, this vulnerability could result in unauthorized access to the internal database and compromise of sensitive system information.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.