IBM Guardium Data Protection GIM Hardcoded Credentials Vulnerability (CVE-2026-84891)

IBM Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891) Vulnerability Overview CVE ID: CVE-2026-84891 Description: IBM Guardium Data Protection has a security vulnerability that allows remote attackers to obtain sensitive information through hardcoded credentials. CWE: CWE-798: Use of Hard-coded Credentials CVSS Source: IBM CVSS Base Score: 5.9 CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Affected Products Affected Product: IBM Guardium Data Protection Versions: 12.2, 12.1, 12.0 Component: Windows GIM component Resolution Remediation: IBM strongly recommends applying the latest IBM Guardium Data Protection GIM Windows patch immediately. Patch Link: IBM Guardium Data Protection GIM Windows Patch Additional Information Workarounds and Mitigations: None Notifications: Subscribe to my notifications for important product support alerts. References: - Complete CVSS v3 Guide - On-line Calculator v3 Related Information: - IBM Secure Engineering Web Portal - IBM Product Security Incident Response Blog Change History October 8, 2026: Initial release Disclaimer The Common Vulnerability Scoring System (CVSS) is an “industry open standard” designed to communicate vulnerability severity and determine the urgency and priority of response, as defined by the Forum of Incident Response and Security Teams (FIRST). IBM provides CVSS scores “as is” without any express or implied warranties. Customers are responsible for assessing the impact of the vulnerability on their specific use case. IBM periodically updates component records in the product/service inventory and addresses related vulnerabilities regardless of their CVE date. The inclusion of an older CVE ID does not imply that IBM has been using the referenced product since that date, nor does it indicate that IBM was aware of the vulnerability at that time. We strive to keep customers informed of relevant vulnerabilities as they come to our attention. The IBM Security Bulletin referencing “Affected products and versions” refers only to products and versions supported by IBM that have not reached end of support. Therefore, unsupported or extended support products and versions not referenced in this security bulletin do not constitute a finding by IBM that they are unaffected by the vulnerability. Referencing one or more unsupported versions in this security bulletin imposes no obligation on IBM to provide fixes for any unsupported or extended support products or versions.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Guardium Data Protection GIM Hardcoded Credentials Vulnerability (CVE-2026-84891)

More from this source