CVEvulnerability

CVE-2025-36355

8.5 HIGH Published 2025-10-06 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-10-06
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.5 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
Weaknesses
CWE-829

Description

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.

Affected configurations

• ibm security verify access (>= 10.0.0.0 < 10.0.9.0) • ibm security verify access 10.0.9.0 • ibm security verify access docker (>= 10.0.0.0 < 10.0.9.0) • ibm security verify access docker 10.0.9.0 • ibm verify identity access (>= 11.0.0.0 < 11.0.1.0) • ibm verify identity access 11.0.1.0 • ibm verify identity access docker (>= 11.0.0.0 < 11.0.1.0) • ibm verify identity access docker 11.0.1.0

Related

Weakness · CWE (1)

  • CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness

References