AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

IBMCVE-2026-84034

IBM Guardium Data Protection: hard-coded credentials

IBM

CVE-2026-84034 · Published Sep 18, 2026 · updated Oct 6, 2026

High8.8
No fix yet
IBM advisory

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise of sensitive system information.

Affected versions

PackageAffectedFixed in
Guardium Data Protection
Product
<= 12.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-798

More IBM advisories

All IBM
High 8.1Sep 18IBM Guardium Data Protection: improper authorizationCVE-2026-84241no fix yetHigh 8.8Sep 18IBM Guardium Data Protection: cross-site request forgeryCVE-2026-84084no fix yetHigh 8.1Sep 18IBM Guardium Data Protection: command injectionCVE-2026-84085no fix yetHigh 7.2Sep 18IBM Guardium Data Protection: remote code executionCVE-2026-84086no fix yetHigh 7.8Sep 18IBM Guardium Data Protection: privilege escalationCVE-2026-84089no fix yetHigh 7.7Sep 18IBM Guardium Data Protection: information disclosureCVE-2026-84105no fix yet