IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7270422 | Mitigation Vendor Advisory |
Configurations
History
27 Apr 2026, 18:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.ibm.com/support/pages/node/7270422 - Mitigation, Vendor Advisory | |
| First Time |
Ibm guardium Data Protection
Ibm |
|
| CPE | cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:* |
23 Apr 2026, 00:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-23 00:16
Updated : 2026-04-27 18:13
NVD link : CVE-2026-4917
Mitre link : CVE-2026-4917
CVE.ORG link : CVE-2026-4917
JSON object : View
Products Affected
ibm
- guardium_data_protection
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')