CVE-2012-3309: Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8....

Security readout for executives and security teams

This issue affects IBM InfoSphere Guardium 8.2 and earlier when CSRF filtering is disabled. A remote attacker could trick an authenticated administrator into creating a new administrative account, potentially giving the attacker privileged access to a security monitoring platform. Exposure is limited to IBM InfoSphere Guardium 8.2 and earlier systems with CSRF filtering disabled and reachable administrative workflows. Environments without those versions, without admin browser exposure, or with CSRF filtering enabled are less likely to be affected. Prioritize this for any legacy Guardium deployment because successful abuse could create unauthorized administrative access. Urgency is highest where Guardium admin access is reachable and CSRF filtering may be disabled. Mitigation focus: Enable Guardium CSRF filtering, including csrf_status, where applicable.; Review IBM support guidance for vendor fixes or configuration requirements.; Restrict administrative interface access to trusted networks and administrators..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.