[CVE-2026-84250] IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-code…

Descripción técnica

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.

Puntuación CVSS

Score: 8.4/10 — Severidad: HIGH — Estado NIST: Awaiting Analysis

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-798

Fuente oficial

Publicado en NIST NVD.