Business Logic Bypass in IBM Guardium Data Protection Access Panel

Publication date: 2026-04-23

Last updated on: 2026-04-27

Assigner: IBM Corporation

Description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic vulnerability in the access management control panel.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-23

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2026-04-23

EPSS Evaluated

2026-07-05

NVD

CVE-2026-1274

EUVD

EUVD-2026-25123

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	guardium_data_protection	12.1
ibm	guardium_data_protection	12.0
ibm	guardium_data_protection	12.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-840	Business Logic Errors

Attack-Flow Graph

Executive Summary

This vulnerability is a Bypass Business Logic issue found in IBM Guardium Data Protection versions 12.0, 12.1, and 12.2. It affects the access management control panel, allowing an attacker to circumvent the intended business logic controls.

Impact Analysis

The vulnerability can lead to unauthorized actions within the access management control panel, potentially allowing an attacker with high privileges to bypass important business logic restrictions. This could result in improper access control and manipulation of protected data or system functions.

Hi! I’m here to help you understand CVE-2026-1274. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70