Skip to content
OpenAdvisories
High WID-SEC-2025-2210 3 CVEs

IBM Security Verify Access: Mehrere Schwachstellen

Published Oct 6, 2025 · Updated Oct 6, 2025 · de-DE

Vendor: IBM Product: Security Verify Access Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um beliebigen Programmcode auszuführen und seine Privilegien zu erhöhen.

Product

IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungslösung.

Vulnerabilities 3

  • Critical 9.3
    CVE-2025-36356

    IBM Security Verify Access privilege escalation

    IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.

    IBM Security Verify Access Docker Security Verify Access Appliance
  • High 8.5
    CVE-2025-36355

    IBM Security Verify Access code execution

    IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.

    IBM Security Verify Access Docker Security Verify Access Appliance
  • High 7.3
    CVE-2025-36354

    IBM Security Verify Access command execution

    IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of u…

    IBM Security Verify Access Docker Security Verify Access Appliance

Revision history

  1. #1

    Initiale Fassung

References