CVE-2025-3473 MEDIUM

CVE-2025-3473: IBM Security Guardium privilege escalation

Vendor Ibm
Product Security Guardium
Weakness CWE-277
Published June 11, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program.

Key dates

02Disclosure timeline

June 11, 2025 CVE published
February 26, 2026 Record updated