Description


IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.

Related CPE's


Weaknesses



CWE-798

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 · High

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-10-08T20:17:37.460Z

22 hours ago

Last modified

2026-10-09T16:03:30.100Z

2 hours ago