CyberRota Analysis
AI-GeneratedIBM Guardium Data Protection 12.2 is susceptible to local privilege escalation due to insufficient argument validation in the SUID-root nmap_wrapper binary on the Collector appliance. This vulnerability allows a low-privileged local attacker to execute arbitrary commands with root privileges, potentially leading to a complete compromise of the appliance. Organizations using this version of Guardium should prioritize remediation to mitigate the risk of unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on the Collector appliance. A local attacker with low-privileged access to the Collector can exploit insufficient argument validation in the SUID binary to execute arbitrary commands as root, resulting in full compromise of the Collector appliance.
Related CVEs
Other vulnerabilities affecting the same vendor(s)