CVE-2026-84274: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in IBM Guardium Data Protection

CVE-2026-84274 is a sensitive information exposure vulnerability (CWE-200) in IBM Guardium Data Protection 12.2.2. During the rotation of SECRET and API_KEY credentials, these sensitive materials are logged at INFO level by the edge-controller and edge-manager components. This logging behavior allows an authenticated attacker who can access the relevant application or container logs to obtain sensitive credentials. Such exposure could enable the attacker to impersonate services or gain unauthorized access to the Guardium control plane.

The vulnerability allows an authenticated attacker with access to application or container logs to obtain sensitive credential material. This can lead to impersonation of services or unauthorized access to the Guardium control plane, potentially compromising the confidentiality of the protected data environment. The CVSS score of 6.5 (medium severity) reflects the network attack vector with low attack complexity but requiring privileges, and the impact is primarily on confidentiality.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to application and container logs to trusted administrators only and monitor for unauthorized access to these logs. Avoid exposing logs to untrusted users or systems.