{"id":"CVE-2026-84228","kind":"vulnerability","aliases":["CVE-2026-84228"],"related":[],"title":"IBM Guardium Data Protection: improper input validation leaks sensitive information","description":"IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.","summary":"IBM Guardium Data Protection 12.2.4 has an improper input validation flaw. A remote attacker with a valid account can obtain sensitive information from the product.","severity":"low","cvss":3.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["data-protection","ibm-guardium","self-hosted","vendor"],"not_affected_if":["no-authenticated-users","other-versions"],"how_to_check":"- Confirm the installed version: `unknown` if the sources do not say how to read it on your appliance.\n- Check whether your Guardium Data Protection version is 12.2.4: the sources name only this version.","fix":null,"status":"open","published_at":"2026-11-08T19:17:41+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","triaged_at":"2026-11-08T19:23:32+00:00","updated_at":"2026-11-08T19:23:32+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-08T19:23:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Guardium Data Protection: improper input validation leaks sensitive information","impact":"low","summary":"IBM Guardium Data Protection 12.2.4 has an improper input validation flaw. A remote attacker with a valid account can obtain sensitive information from the product.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-guardium","data-protection","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Remote authenticated user reads sensitive information from the product","analyst_note":"Check the IBM security bulletin for CVE-2026-84228 for the fixed version and exact affected configuration; the NVD entry gives only the description.","how_to_check":"- Confirm the installed version: `unknown` if the sources do not say how to read it on your appliance.\n- Check whether your Guardium Data Protection version is 12.2.4: the sources name only this version.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["other-versions","no-authenticated-users"],"who_is_affected":"Organizations running IBM Guardium Data Protection 12.2.4 where remote users have authenticated accounts. The sources do not describe the exact configuration needed to reach the flaw, so the exposure of other versions is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000704,"input_tokens":4507,"output_tokens":506,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-84228':13A,16A '12.2.4':31B,56C 'account':44B 'allow':58C 'attack':40B,62C 'authent':61C 'could':57C 'cve':11A,14A 'data':3A,18B,29B,54C 'data-protect':17B 'due':67C 'flaw':37B 'guardium':2A,22B,28B,53C 'host':25B 'ibm':1A,21B,27B,52C 'ibm-guardium':20B 'improp':5A,34B,69C 'inform':10A,48B,66C 'input':6A,35B,70C 'leak':8A 'obtain':46B,64C 'product':51B 'protect':4A,19B,30B,55C 'remot':39B,60C 'self':24B 'self-host':23B 'sensit':9A,47B,65C 'valid':7A,36B,43B,71C 'vendor':26B","nicknames":[],"mitigations":[],"who_affected":"Organizations running IBM Guardium Data Protection 12.2.4 where remote users have authenticated accounts. The sources do not describe the exact configuration needed to reach the flaw, so the exposure of other versions is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dataprotection","ibmguardium","low","selfhosted","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-84228':13A,16A 'cve':11A,14A 'data':3A 'guardium':2A 'ibm':1A 'improp':5A 'inform':10A 'input':6A 'leak':8A 'protect':4A 'sensit':9A 'valid':7A","search_b":"'12.2.4':31B 'account':44B 'attack':40B 'data':18B,29B 'data-protect':17B 'flaw':37B 'guardium':22B,28B 'host':25B 'ibm':21B,27B 'ibm-guardium':20B 'improp':34B 'inform':48B 'input':35B 'obtain':46B 'product':51B 'protect':19B,30B 'remot':39B 'self':24B 'self-host':23B 'sensit':47B 'valid':36B,43B 'vendor':26B","search_c":"'12.2.4':56C 'allow':58C 'attack':62C 'authent':61C 'could':57C 'data':54C 'due':67C 'guardium':53C 'ibm':52C 'improp':69C 'inform':66C 'input':70C 'obtain':64C 'protect':55C 'remot':60C 'sensit':65C 'valid':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T19:17:41+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84228","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84228","severity":null,"published_at":"2026-11-08T19:17:41+00:00","modified_at":"2026-11-08T19:17:41+00:00","first_seen_at":"2026-11-08T19:22:34+00:00","fetched_at":"2026-11-08T19:22:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}