8.8
High
CVE-2026-85542 IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import…
Description
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the GIM bundle import functionality. An authenticated attacker can provide a crafted GIM bundle that causes attacker-controlled arguments to be passed to the tar command, resulting in arbitrary command execution with elevated privileges on the Central Manager.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardium Data Protection | 12.2 | No fix stated |
Other CVEs of Guardium Data Protection
The 97 CVEs of Guardium Data Protection →
CVE-2026-84237
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84229
IBM Guardium Data Protection is affected by multiple vulnerabilities
6.5
Medium
CVE-2026-84228
IBM Guardium Data Protection is affected by multiple vulnerabilities
3.1
Low
CVE-2026-84030
IBM Guardium Data Protection is affected by multiple vulnerabilities
5.6
Medium