CVE-2026-84274CWE-200information-disclosure

CVE-2026-84274

Medium · published October 9, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is logged at INFO level by the edge-controller/edge-manager components. An authenticated attacker with access to the relevant application or container logs could obtain these credentials and use them to impersonate services or gain unauthorized access to the Guardium control plane.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-10-09T00:17Z
Affected products (1)
ProductVersionsFixed in
ibm/guardium_data_protectionall versions—
References (1)
https://www.ibm.com/support/pages/node/7288627 · [email protected]
EPSS history
Timeline
  • 10 OCT 03:32Z
    EPSS moved — → 0%
    epss
  • 08 OCT 19:04Z
    IBM Guardium Data Protection Information Disclosure
    cvelistv5
  • 08 OCT 19:04Z
    IBM Guardium Data Protection Information Disclosure
    cvelistv5