{"affected":[{"product":"Guardium Data Protection","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"12.2.4"}]}],"cveId":"CVE-2026-84229","cwes":["CWE-352"],"description":"IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper validation of CSRF tokens for GET requests.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"}],"modifiedAt":1794163334253,"publishedAt":1794163334253,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7295791"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n ProductVersions FixIBM Guardium Data Protection12.2.4 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=All&platform=All&function=fixId&fixids=SqlGuard_12.0p7240_GPU_Oct_2026_V12.2.4_FC&includeSupersedes=0&source=fc"},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7295791"}],"revision":"ba8cb463d0096ad9088cbaeb1f67039774fd209cb1a796db060dfba41efce2dd","sources":[{"modifiedAt":1794163334253,"name":"CNA: ibm","retrievedAt":1794164946298,"url":"https://www.cve.org/CVERecord?id=CVE-2026-84229"}],"ssvc":null,"status":"published","title":"IBM Guardium Data Protection is affected by multiple vulnerabilities","updatedAt":1794164946298}