CyberRota Analysis
AI-GeneratedIBM Guardium Data Protection 12.2 is susceptible to unauthenticated insecure deserialization and reflective method dispatch vulnerabilities in its Change Audit System listener. An attacker with network access to TCP port 16017 can exploit this flaw by sending specially crafted serialized messages, potentially leading to arbitrary code execution on the Guardium appliance. Organizations using this version of IBM Guardium should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the Change Audit System (CAS) listener. A network attacker able to reach TCP port 16017 may submit crafted serialized messages and potentially cause unintended code execution in the Guardium appliance.
Related CVEs
Other vulnerabilities affecting the same vendor(s)