CVE-2026-84884 is a vulnerability in IBM Guardium Data Protection version 12.2 where internal REST service-account passwords are stored in a reversible plaintext-equivalent format. This insecure storage allows an authenticated attacker who gains access to the stored credentials to recover the plaintext password. With the recovered password, the attacker can obtain an administrative REST access token, potentially leading to high impact on confidentiality, integrity, and availability of the system.

The vulnerability allows an authenticated attacker to recover plaintext passwords from stored credentials, enabling administrative REST access. This compromises confidentiality, integrity, and availability of the affected system components.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is available, restrict access to stored credentials and monitor for unauthorized access.