Description (CNA)
IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| IBM / Guardium Data Protection | affected 12.2 |
CWE
CWE-94
References
ADP enrichment
No English description supplied.
No references supplied.