CVE-2026-87980

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-15

Assigner: IBM Corporation

Description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-09

EPSS Evaluated

2026-10-18

NVD

CVE-2026-87980

EUVD

EUVD-2026-95319

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	guardium_data_protection	From 12.0 (inc) to 12.2 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

IBM Guardium Data Protection 12.0, 12.1, and 12.2 stores sensitive information in logs without encryption. A local attacker could access these logs and retrieve the sensitive data.

Detection Guidance

This vulnerability involves cleartext storage of sensitive information in logs for IBM Guardium Data Protection. To detect it, inspect log files for unencrypted sensitive data such as credentials or configuration details. Check directories where Guardium logs are stored, typically /var/log/guardium/ or similar, using commands like grep or find to search for plaintext sensitive information.

Impact Analysis

An attacker with local access could obtain sensitive information from logs, leading to potential data breaches or unauthorized access to confidential data.

Compliance Impact

This vulnerability may violate compliance requirements for data protection and privacy, such as GDPR or HIPAA, due to the exposure of sensitive information in cleartext logs.

Mitigation Strategies

Apply the latest IBM Guardium Data Protection patches or updates to address the cleartext log storage issue. Review and secure log files to ensure sensitive information is not stored in cleartext. Restrict access to log files to authorized personnel only.

Hi! I’m here to help you understand CVE-2026-87980. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70