CVE-2026-84275
Awaiting Analysis Awaiting Analysis - Queue

Path Traversal in IBM Guardium Data Protection

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description
IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-08
Last Modified
2026-10-08
Generated
2026-10-09
AI Q&A
2026-10-08
EPSS Evaluated
N/A
NVD
CVE-2026-84275
EUVD
EUVD-2026-95235

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
IBM Guardium Data Protection 12.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IBM Guardium Data Protection 12.2 has a path traversal vulnerability in its GIM file-upload feature. This allows an unauthenticated attacker to write arbitrary files to the Collector system by exploiting improper file path validation.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized file uploads or path traversal attempts in IBM Guardium Data Protection 12.2. Monitor GIM file-upload logs for unusual file paths containing '..' or absolute paths. Inspect Collector directories for unexpected files. Use network traffic analysis to detect unauthenticated requests to file-upload endpoints.

Impact Analysis

An attacker could exploit this to write malicious files to the Collector, potentially leading to system compromise, data theft, or disruption of Guardium's monitoring and protection functions.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating compliance requirements for data protection and privacy such as GDPR and HIPAA.

Mitigation Strategies

Apply the latest IBM Guardium Data Protection patch or update to address the path traversal vulnerability in the GIM file-upload functionality. Ensure network segmentation to limit access to the Collector and monitor for unauthorized file writes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84275. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart