IBM Guardium 12.* Security Misconfiguration User Access Control
CVE-2026-1272 Published on April 22, 2026

IBM Guardium Data Protection is affected by multiple vulnerabilities
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-1272 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."


Products Associated with CVE-2026-1272

Want to know whenever a new CVE is published for IBM Guardium Data Protection? stack.watch will email you.

IBM Guardium Data Protection
 

Affected Versions

IBM Guardium Data Protection: