CVE-2026-84891 Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials...

CVE-2026-84891

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a security flaw in the Windows GIM component . The root cause is the use of hard-coded credentials (CWE-798), which could allow a remote attacker to obtain sensitive information. To remediate this vulnerability, IBM reco...

CVE-2026-84891 Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

CVE-2026-84275 IBM Guardium Data Protection Path Traversal

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

EUVD-2026-95235

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

CVE-2026-84275 IBM Guardium Data Protection Path Traversal

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to a path traversal flaw within the GIM file-upload functionality . This vulnerability allows an unauthenticated attacker to perform a traversal attack to write arbitrary files to the Collector . No specific remediation information or exploit detail...

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

CVE-2026-84275: Improper Limitation of a Pathname to a Restricted Directory

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

PT-2026-108182

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An unauthenticated attacker can exploit a path traversal issue within the GIM file-upload functionality to write arbitrary files to the Collector. Path traversal is a technique that allows ...

CVE-2026-85542

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

CVE-2026-85542

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability within the GIM bundle import functionality . An authenticated attacker can supply a maliciously crafted GIM bundle, causing the system to pass attacker-controlled arguments to the tar command . This flaw can lead t...

CVE-2026-85542 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

CVE-2026-85542 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

EUVD-2026-87097

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

CVE-2026-85542: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution...

PT-2026-98859

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated attacker can exploit a command injection flaw in the GIM bundle import functionality. By providing a specially crafted GIM bundle, an attacker can pass controlled arguments...

CVE-2025-41015

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in...

CVE-2025-41012

Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'...