Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-36356 EUVD-2025-32152GHSA-v32q-pvc7-fgqc

IBM Security Verify Access privilege escalation

Published Oct 6, 2025 · Updated Oct 6, 2025 · Assigned by ibm

Description

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.

Affected products

VendorProductAffectedFixed
IBM Security Verify Access Appliance 10.0.0.0 – ≤ 10.0.9.0 IF2, 11.0.0.0 – ≤ 11.0.1.0 —
IBM Security Verify Access Docker 10.0.0.0 – ≤ 10.0.9.0 IF2, 11.0.0.0 – ≤ 11.0.1.0 —

Advisories 1

References