GHSA-7xw6-2x57-6mvmHighCVSS 7.2
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID...
🔗 CVE IDs covered (1)
📋 Description
IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject arbitrary commands through attacker-controlled arguments, resulting in command execution with root privileges.