IBM Guardium Data Protection version 12.2 contains an improper authorization vulnerability (CWE-285) that could allow a remote attacker with valid authentication to bypass security restrictions. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, limited confidentiality impact, high integrity impact, and low availability impact. No vendor advisory or patch information is currently available.

An authenticated attacker could bypass security controls, potentially leading to unauthorized actions that compromise data integrity and confidentiality to some extent, with limited impact on availability. The vulnerability could allow unauthorized modification or access beyond intended permissions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected version and monitor for unusual activity consistent with authorization bypass attempts.