9.3

CVE-2025-36356

Medienbericht

IBM Security Verify Access privilege escalation

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Security Verify Access Version >= 10.0.0.0 < 10.0.9.0
Ibm ≫ Security Verify Access Version 10.0.9.0 Update -
Ibm ≫ Security Verify Access Version 10.0.9.0 Update interim_fix1
Ibm ≫ Security Verify Access Version 10.0.9.0 Update interim_fix2
Ibm ≫ Security Verify Access Docker Version >= 10.0.0.0 < 10.0.9.0
Ibm ≫ Security Verify Access Docker Version 10.0.9.0 Update -
Ibm ≫ Security Verify Access Docker Version 10.0.9.0 Update interim_fix1
Ibm ≫ Security Verify Access Docker Version 10.0.9.0 Update interim_fix2
Ibm ≫ Verify Identity Access Version >= 11.0.0.0 < 11.0.1.0
Ibm ≫ Verify Identity Access Version 11.0.1.0 Update -
Ibm ≫ Verify Identity Access Docker Version >= 11.0.0.0 < 11.0.1.0
Ibm ≫ Verify Identity Access Docker Version 11.0.1.0 Update -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.073
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
IBM 9.3 2.5 6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-250 Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
08.10.2025 12:21
https://www.ibm.com/support/pages/node/7247215
Patch
Vendor Advisory