Description
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges.
CVSS impact metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.4 · High
Information
Source identifier
Vulnerability status
Analyzed
Published
2026-10-08T20:17:37.460Z
22 hours agoLast modified
2026-10-09T16:03:30.100Z
2 hours ago