CVE-2026-4917

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4917", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-03-26T17:42:57.635Z", "datePublished": "2026-04-22T23:27:45.961Z", "dateUpdated": "2026-04-23T16:24:06.376Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-22T23:27:45.961Z"}, "title": "IBM Guardium Data Protection is affected by multiple vulnerabilities", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Guardium Data Protection", "versions": [{"status": "affected", "version": "12.1", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to write arbitrary files on the system.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to write arbitrary files on the system.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7270422", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.9, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"}}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\u00a0ProductVersions\u00a0FixIBM Guardium Data Protection12.1https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&amp;product=ibm/Information+Management/InfoSphere+Guardium&amp;release=12.1&amp;platform=Linux&amp;function=fixId&amp;fixids=SqlGuard-12.0p140_Bundle&amp;includeSupersedes=0&amp;source=fc", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p><strong>IBM encourages customers to update their systems promptly.</strong></p></div></div></div></div></div></div></div><div><div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div><table><tbody><tr><td><strong>&nbsp;Product</strong></td><td><strong>Versions</strong></td><td><strong>&nbsp;Fix</strong></td></tr><tr><td>IBM Guardium Data Protection</td><td>12.1</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&amp;product=ibm/Information+Management/InfoSphere+Guardium&amp;release=12.1&amp;platform=Linux&amp;function=fixId&amp;fixids=SqlGuard-12.0p140_Bundle&amp;includeSupersedes=0&amp;source=fc\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&amp;product=ibm/Information+Management/InfoSphere+Guardium&amp;release=12.1&amp;platform=Linux&amp;function=fixId&amp;fixids=SqlGuard-12.0p140_Bundle&amp;includeSupersedes=0&amp;source=fc</a></td></tr></tbody></table></div></div></div><p></p>"}]}], "x_generator": {"engine": "ibm-cvegen"}, "credits": [{"lang": "en", "value": "benjamin.dixon.vaca8k@statefarm.com, benjamin.dixon.vaca8k@statefarm.com, benjamin.dixon.vaca8k@statefarm.com", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-23T14:04:33.173631Z", "id": "CVE-2026-4917", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-23T16:24:06.376Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "IBM Guardium Data Protection is affected by multiple vulnerabilities", "credits": [{"lang": "en", "type": "finder", "value": "benjamin.dixon.vaca8k@statefarm.com, benjamin.dixon.vaca8k@statefarm.com, benjamin.dixon.vaca8k@statefarm.com"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Guardium Data Protection", "versions": [{"status": "affected", "version": "12.1", "versionType": "semver"}]}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\u00a0ProductVersions\u00a0FixIBM Guardium Data Protection12.1https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&amp;product=ibm/Information+Management/InfoSphere+Guardium&amp;release=12.1&amp;platform=Linux&amp;function=fixId&amp;fixids=SqlGuard-12.0p140_Bundle&amp;includeSupersedes=0&amp;source=fc", "supportingMedia": [{"type": "text/html", "value": "<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p><strong>IBM encourages customers to update their systems promptly.</strong></p></div></div></div></div></div></div></div><div><div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div><table><tbody><tr><td><strong>&nbsp;Product</strong></td><td><strong>Versions</strong></td><td><strong>&nbsp;Fix</strong></td></tr><tr><td>IBM Guardium Data Protection</td><td>12.1</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&amp;product=ibm/Information+Management/InfoSphere+Guardium&amp;release=12.1&amp;platform=Linux&amp;function=fixId&amp;fixids=SqlGuard-12.0p140_Bundle&amp;includeSupersedes=0&amp;source=fc\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&amp;product=ibm/Information+Management/InfoSphere+Guardium&amp;release=12.1&amp;platform=Linux&amp;function=fixId&amp;fixids=SqlGuard-12.0p140_Bundle&amp;includeSupersedes=0&amp;source=fc</a></td></tr></tbody></table></div></div></div><p></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7270422", "tags": ["vendor-advisory", "patch"]}], "x_generator": {"engine": "ibm-cvegen"}, "descriptions": [{"lang": "en", "value": "IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to write arbitrary files on the system.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to write arbitrary files on the system.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-04-22T23:27:45.961Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4917", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-23T14:04:33.173631Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-04-23T14:04:37.008Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-4917", "state": "PUBLISHED", "dateUpdated": "2026-04-22T23:27:45.961Z", "dateReserved": "2026-03-26T17:42:57.635Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-04-22T23:27:45.961Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.1.0:*:*:*:*:*:*:*"], "product": "Guardium Data Protection", "vendor": "IBM", "versions": [{"status": "affected", "version": "12.1", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:guardium_data_protection:12.1:*:*:*:*:*:*:*", "matchCriteriaId": "EADF2641-F8DF-4986-8106-287C615DE19D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to write arbitrary files on the system."}, {"lang": "es", "value": "IBM Guardium Data Protection 12.1 podr\u00eda permitir a un usuario administrativo recorrer directorios en el sistema. Un atacante podr\u00eda enviar una solicitud URL especialmente dise\u00f1ada que contenga secuencias \u2019punto punto\u2019 (/.. / ) para escribir archivos arbitrarios en el sistema."}], "id": "CVE-2026-4917", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4917", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-23T14:04:33.173631Z", "version": "2.0.3"}}]}, "published": "2026-04-23T00:16:46.293", "references": [{"source": "psirt@us.ibm.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7270422"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[12.1,12.1]"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Guardium Data Protection", "source": "cna", "vendor": "IBM"}, "product": "guardium_data_protection", "vendor": "ibm"}], "analysis": {"en": {"generated_at": "2026-04-28T15:14:13.799477+00:00", "value": {"mitigation_remediation": ["Update IBM Guardium Data Protection to the latest available patch using IBM Fix Central or the IBM Security Quick Order service as documented in the official advisory", "Limit access to the administrative web interface to trusted hosts or IP ranges, enforce strong network segmentation, and require multi\u2011factor authentication for administrators", "Monitor system logs and web access for anomalous path traversal attempts and ensure that file creation outside designated directories is flagged or blocked"], "summary": {"action": "Apply Patch", "impact": "Directory traversal allowing creation of arbitrary files by an administrative user"}, "threat_synthesis": {"affected_systems": "Affected is IBM Guardium Data Protection version 12.1, including build 12.1.0 and any 12.1 release that has not applied the listed fix. The product is available for Linux platforms.", "description_and_impact": "This vulnerability in IBM Guardium Data Protection 12.1 allows an administrator who can send crafted HTTP requests to write files anywhere in the underlying operating system. Exploitation yields the ability to place arbitrary content, which could include malicious executables or configuration files, thereby compromising system integrity and potentially enabling further attacks. The weakness is a classic directory traversal flaw (CWE-22) and is limited to users with administrative privileges, but even an accidental misuse could damage critical data or create backdoors.", "risk_and_exploitability": "The CVSS score of 4.9 indicates a moderate impact, and the EPSS score of less than 1% suggests that analyst data does not show a high likelihood of active exploitation. The vulnerability is not listed in CISA's KEV catalog. Attackers would need to interact with the web interface as an administrative user and supply a URL containing \"../\" sequences to influence the file path. Once authenticated, the attacker can write files anywhere in the system tree, providing a foothold for further compromise."}}}}, "created": "2026-04-28T06:15:23.947049+00:00", "updated": "2026-04-28T15:15:34.211440+00:00", "vendors": ["ibm", "ibm$PRODUCT$guardium_data_protection"]}