CVE-2025-36356

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.
References
Link Resource
https://www.ibm.com/support/pages/node/7247215 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.0:interim_fix1:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.0:interim_fix2:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:interim_fix1:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:interim_fix2:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:11.0.1.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_docker:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_docker:11.0.1.0:-:*:*:*:*:*:*

History

15 Dec 2025, 19:20

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7247215 - () https://www.ibm.com/support/pages/node/7247215 - Patch, Vendor Advisory
CPE cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:interim_fix1:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.0:interim_fix2:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:interim_fix2:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:11.0.1.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_docker:11.0.1.0:-:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:verify_identity_access_docker:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.9.0:interim_fix1:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:10.0.9.0:-:*:*:*:*:*:*
First Time Ibm security Verify Access Docker
Ibm security Verify Access
Ibm verify Identity Access Docker
Ibm
Ibm verify Identity Access

06 Oct 2025, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-06 17:16

Updated : 2025-12-15 19:20


NVD link : CVE-2025-36356

Mitre link : CVE-2025-36356

CVE.ORG link : CVE-2025-36356


JSON object : View

Products Affected

ibm

  • verify_identity_access
  • security_verify_access
  • security_verify_access_docker
  • verify_identity_access_docker
CWE
CWE-250

Execution with Unnecessary Privileges