CVE-2026-84075

Summary

This flaw allows a remote attacker to bypass security restrictions by exploiting the ChangeTrackerServlet due to missing authentication, posing a critical risk to the system's integrity.

Exploitability

Exploitation is relatively straightforward given the missing authentication requirement, and attackers would need access to the ChangeTrackerServlet endpoint.

Blast radius

If exploited, this could lead to unauthorized access and potential data breaches, impacting the confidentiality and availability of protected data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.