important · Database security — Guardium
Unauthenticated callers can execute operating-system commands on IBM Guardium Data Protection 12.2.
Affects
IBM Guardium Data Protection, a Linux-based database-security and activity-monitoring appliance.
Two network-reachable paths pass insufficiently neutralized shell metacharacters into operating-system commands without requiring credentials or interaction.
Detail and 1 source
IBM has shipped a FixPack for the affected version.