← Back

CVE-2025-36355

nvd nist
Published: Oct 6, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
Exploitability: 2.5 / Impact: 5.3
Source: psirt@us.ibm.com (Secondary)

Description

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.

Affected (12)

Ibm
4 products
Security Verify Access
Security Verify Access Docker
Verify Identity Access
Verify Identity Access Docker
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Security Verify Access
From 10.0.0.0 to 10.0.9.0
Security Verify Access
Version 10.0.9.0
Security Verify Access
Version 10.0.9.0 interim_fix1
Security Verify Access
Version 10.0.9.0 interim_fix2
Ibm
Security Verify Access Docker
From 10.0.0.0 to 10.0.9.0
Security Verify Access Docker
Version 10.0.9.0
Security Verify Access Docker
Version 10.0.9.0 interim_fix1
Security Verify Access Docker
Version 10.0.9.0 interim_fix2
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Verify Identity Access
From 11.0.0.0 to 11.0.1.0
Verify Identity Access
Version 11.0.1.0
Ibm
Verify Identity Access Docker
From 11.0.0.0 to 11.0.1.0
Verify Identity Access Docker
Version 11.0.1.0

Related CWEs

CWE-829
Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References (1)

Source: psirt@us.ibm.com
PatchVendor Advisory

Timeline

No history available yet.