IBM Guardium Data Protection Directory Traversal Vulnerability Allowing Arbitrary File Write

A directory traversal vulnerability has been identified in IBM Guardium Data Protection version 12.1. This issue could allow an administrative user to traverse directories on the system. By sending a specially crafted URL request that includes 'dot dot' sequences, an attacker could potentially write arbitrary files on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized file writing on the system, potentially allowing for further exploitation or manipulation of the application or server.

Remediation

Users are encouraged to update to the latest version of IBM Guardium Data Protection. Instructions for downloading the update are available on the IBM Support Fix Central website.