CVEvulnerability

CVE-2025-36356

9.3 CRITICAL Published 2025-10-06 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-10-06
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.3 CRITICAL — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-250

Description

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.

Affected configurations

• ibm security verify access (>= 10.0.0.0 < 10.0.9.0) • ibm security verify access 10.0.9.0 • ibm security verify access docker (>= 10.0.0.0 < 10.0.9.0) • ibm security verify access docker 10.0.9.0 • ibm verify identity access (>= 11.0.0.0 < 11.0.1.0) • ibm verify identity access 11.0.1.0 • ibm verify identity access docker (>= 11.0.0.0 < 11.0.1.0) • ibm verify identity access docker 11.0.1.0

Related

Weakness · CWE (1)

  • CWE-250 Execution with Unnecessary Privileges weakness

References