CVE-2026-87980

Received Received - Intake

IBM Guardium Data Protection Cleartext Credentials in Logs

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: IBM Corporation

Description

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-08

Generated

2026-10-09

AI Q&A

2026-10-09

EPSS Evaluated

N/A

NVD

CVE-2026-87980

Affected Vendors & Products

Vendor	Product	Version / Range
IBM	Guardium	Data Protection 12.0
IBM	Guardium	Data Protection 12.1
IBM	Guardium	Data Protection 12.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

IBM Guardium Data Protection 12.0, 12.1, and 12.2 stores sensitive information in logs without encryption. A local attacker could access these logs and retrieve the sensitive data.

Impact Analysis

An attacker with local access could obtain sensitive information from logs, leading to potential data breaches or unauthorized access to confidential data.

Compliance Impact

This vulnerability may violate compliance requirements for data protection and privacy, such as GDPR or HIPAA, due to the exposure of sensitive information in cleartext logs.

Mitigation Strategies

Apply the latest IBM Guardium Data Protection patches or updates to address the cleartext log storage issue. Review and secure log files to ensure sensitive information is not stored in cleartext. Restrict access to log files to authorized personnel only.

Hi! I’m here to help you understand CVE-2026-87980. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70