CVE-2025-36356

Published: Oct 6, 2025Modified: Jun 17, 2026

9.3

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 6.0

Source: psirt@us.ibm.com (Secondary)

Description

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.

Affected (12)

Products: Ibm: Security Verify Access, Security Verify Access Docker, Verify Identity Access, Verify Identity Access Docker

Ibm

4 products

Security Verify Access

Security Verify Access Docker

Verify Identity Access

Verify Identity Access Docker

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Verify Access	From 10.0.0.0 to 10.0.9.0
Ibm Security Verify Access	Version 10.0.9.0
Ibm Security Verify Access	Version 10.0.9.0 interim_fix1
Ibm Security Verify Access	Version 10.0.9.0 interim_fix2
Ibm Security Verify Access Docker	From 10.0.0.0 to 10.0.9.0
Ibm Security Verify Access Docker	Version 10.0.9.0
Ibm Security Verify Access Docker	Version 10.0.9.0 interim_fix1
Ibm Security Verify Access Docker	Version 10.0.9.0 interim_fix2

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Verify Identity Access	From 11.0.0.0 to 11.0.1.0
Ibm Verify Identity Access	Version 11.0.1.0
Ibm Verify Identity Access Docker	From 11.0.0.0 to 11.0.1.0
Ibm Verify Identity Access Docker	Version 11.0.1.0

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (1)

https://www.ibm.com/support/pages/node/7247215

Source: psirt@us.ibm.com

PatchVendor Advisory

Timeline

No history available yet.