CVE-2022-43907: 
IBM Guardium Appliance vulnerability analysis and mitigation

IBM Security Guardium 11.4 vulnerability (CVE-2022-43907) was identified as a critical security issue that could allow a remote authenticated attacker to execute arbitrary commands on the system through specially crafted requests. The vulnerability was disclosed and documented in IBM's security advisory, affecting multiple versions of IBM Security Guardium including 10.6, 11.3, 11.4, and 11.5 (IBM Advisory).

The vulnerability is classified as an OS Command Injection (CWE-78) issue. According to the National Vulnerability Database, it received a CVSS v3.1 base score of 8.8 (HIGH) from NIST with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, while IBM Corporation assessed it with a CVSS score of 7.2 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (NVD).

The vulnerability poses significant risks as it allows authenticated attackers to execute arbitrary commands on the affected system, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability of the system (IBM Advisory).

IBM has released security patches for all affected versions. Customers are strongly encouraged to update their systems with the provided fixes. For version 11.4 specifically, the fix is available through the bundle SqlGuard11.0p475Bundle_Jul-20-2023 which can be obtained from IBM Fix Central (IBM Advisory).