IBM Security Guardium SQL Injection Vulnerability (CNVD-2023-66731)

IBM Security Guardium is a suite of platforms from International Business Machines (IBM) that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium version 11.4 suffers from a SQL injection vulnerability that stems from the application’s lack of validation of externally entered SQL statements, which can be exploited by an attacker to execute illegal SQL commands to obtain sensitive database data.