IBM Security Guardium Incorrect Privilege Assignment Vulnerability Allowing Arbitrary File Read

Vulnerability

A vulnerability exists in IBM Security Guardium versions 11.4, 11.5, 12.0, and 12.1, allowing a privileged user to read any file on the system. This issue arises from incorrect privilege assignment.

Impact

Exploitation of this vulnerability could lead to unauthorized file access, allowing privileged users to read sensitive files on the system.

Remediation

Users are advised to update to the latest version of IBM Guardium Data Protection. Instructions for downloading the update are available on the IBM Support Fix Central website.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
2.5
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.