CVE-2026-84275

Summary

IBM Guardium Data Protection 12.2 contains a path traversal vulnerability in its GIM file-upload functionality that allows unauthenticated attackers to write arbitrary files to the Collector system. This flaw enables attackers to potentially compromise the data protection platform and gain unauthorized access to sensitive data.

Exploitability

Exploitation is relatively straightforward as it requires only an unauthenticated upload request to a specific endpoint, with no additional authentication or complex preconditions needed.

Blast radius

If exploited, this vulnerability could allow attackers to write malicious files to the Collector system, potentially leading to arbitrary code execution, data exfiltration, or complete compromise of the Guardium Data Protection platform.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to IBM Guardium Data Protection 12.3 or later to remediate this path traversal vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.