IBM Security Guardium Command Execution Vulnerability (CNVD-2023-66738)

IBM Security Guardium is a suite of platforms from International Business Machines (IBM) that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A command execution vulnerability exists in IBM Security Guardium versions 10.6, 11.3, 11.4, and 11.5, which can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request.