CVE-2026-8405 - Vulnerability Details - OpenCVE

IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Ibm	Guardium Data Protection

No data.

No data.

No data.

References

Link	Providers
https://www.ibm.com/support/pages/node/7273657

History

Wed, 27 May 2026 14:15:00 +0000

Type	Values Removed	Values Added
Description		IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named "Long Term Retention" (LTR) can expose sensitive credentials in debug mode.
Title		IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability
First Time appeared		Ibm Ibm guardium Data Protection
Weaknesses		CWE-200
CPEs		cpe:2.3:a:ibm:guardium_data_protection:12.2.1:::::::* cpe:2.3:a:ibm:guardium_data_protection:12.2.2:::::::*
Vendors & Products		Ibm Ibm guardium Data Protection
References		https://www.ibm.com/support/pages/node/7273657
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2026-05-27T13:20:52.982Z

Updated: 2026-05-27T13:20:52.982Z

Reserved: 2026-05-12T15:46:00.950Z

Link: CVE-2026-8405

Vulnrichment

No data.

NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:17:38.490

Modified: 2026-05-27T14:53:51.833

Link: CVE-2026-8405

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8405", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-05-12T15:46:00.950Z", "datePublished": "2026-05-27T13:20:52.982Z", "dateUpdated": "2026-05-27T13:20:52.982Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-05-27T13:20:52.982Z"}, "title": "IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Guardium Data Protection", "versions": [{"status": "affected", "version": "12.2.1", "lessThanOrEqual": "4.4.7 Fix Pack 1", "versionType": "semver"}, {"status": "affected", "version": "12.2.2"}], "cpes": ["cpe:2.3:a:ibm:guardium_data_protection:12.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:guardium_data_protection:12.2.2:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named \"Long Term Retention\" (LTR) can expose sensitive credentials in debug mode.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guardium Data Protection named \"Long Term Retention\" (LTR) can expose sensitive credentials in debug mode.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7273657", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\u00a0ProductVersions\u00a0FixIBM Guardium Data Protection12.2.1 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p1039_Security-Fix&includeSupersedes=0&source=fc IBM Guardium Data Protection12.2.2 https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p223_Security-Fix&includeSupersedes=0&source=fc", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p>IBM encourages customers to update their systems promptly.</p></div></div></div></div></div></div></div><div><div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><div><table><tbody><tr><td><strong> Product</strong></td><td><strong>Versions</strong></td><td><strong> Fix</strong></td></tr><tr><td>IBM Guardium Data Protection</td><td>12.2.1</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p1039_Security-Fix&includeSupersedes=0&source=fc\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p1039_Security-Fix&includeSupersedes=0&source=fc</a></td></tr><tr><td>IBM Guardium Data Protection</td><td>12.2.2</td><td><a href=\"https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p223_Security-Fix&includeSupersedes=0&source=fc\" rel=\"nofollow\">https://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%20Security&product=ibm/Information+Management/InfoSphere+Guardium&release=12.2&platform=Linux&function=fixId&fixids=SqlGuard_12.0p223_Security-Fix&includeSupersedes=0&source=fc</a></td></tr></tbody></table></div></div></div><p></p>"}]}], "x_generator": {"engine": "ibm-cvegen"}}}}