Threats affecting pkg:rpm/ibm/guardium_data_protection

IBM Guardium Data Protection version 12.2 contains a race condition vulnerability in its patch installer that allows signature verification bypass. This flaw can be exploited by a local attacker to execute arbitrary code with root privileges, leading to full system compromise. The vulnerability is classified as CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization). It has a high severity with a CVSS score of 7.8. No patch or official remediation information is currently provided. No known exploits are reported in the wild.

IBM Guardium Data Protection version 12.2 contains a path traversal vulnerability in the Universal Connector Oracle Wallet upload component. This flaw allows an authenticated remote attacker to write arbitrary files to the system, potentially compromising confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS score of 7.5.