CSRF Token Validation Flaw in IBM Guardium Data Protection
CVE-2026-84229

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Guardium Data Protection
Vendor
CVE Published:
8 November 2026

What is CVE-2026-84229?

IBM Guardium Data Protection version 12.2.4 contains a security flaw that enables remote attackers to circumvent protective measures by exploiting improper validation of CSRF tokens in GET requests. This vulnerability could allow unauthorized access, leading to potential data exposure or manipulation. It is crucial for users of this version to apply the recommended patches to ensure the integrity and security of their data systems.

Affected Version(s)

Guardium Data Protection 12.2.4

References

https://www.ibm.com/support/pages/node/7295791
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.