CVE-2026-4917

IBM Guardium Data Protection is affected by multiple vulnerabilities PUBLISHED

Description (CNA)

IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.

Affected (CNA)

Vendor / product	Versions
IBM / Guardium Data Protection	affected 12.1

CWE

CWE-22

References

https://www.ibm.com/support/pages/node/7270422

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.