NetSight
high7.3

CVE-2025-36354

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to…

Impact

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input.

Affected products

VendorProductAffected versions
IbmSecurity Verify Access
from 10.0.0.0 before 10.0.9.0
Version 10.0.9.0
IbmSecurity Verify Access Docker
from 10.0.0.0 before 10.0.9.0
Version 10.0.9.0
IbmVerify Identity Access
from 11.0.0.0 before 11.0.1.0
Version 11.0.1.0
IbmVerify Identity Access Docker
from 11.0.0.0 before 11.0.1.0
Version 11.0.1.0

Weakness classification

References