PT-2025-25494 · Ibm · Ibm Security Verify Directory Container

Published 2025-06-13 · Updated 2025-08-11 · CVE-2025-1411

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Verify Directory Container versions 10.0.0.0 through 10.0.3.1

Description The issue allows a local user to execute commands as root due to execution with unnecessary privileges. This is related to the execution of commands with higher privileges than necessary, which can be exploited by a local user.

Recommendations For versions 10.0.0.0 through 10.0.3.1, consider restricting the execution of commands with root privileges until a patch is available. As a temporary workaround, review and adjust the privileges assigned to the IBM Security Verify Directory Container to minimize the risk of exploitation.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-07293

CVE-2025-1411

Affected Products

Ibm Security Verify Directory Container

References · 13

• https://osv.dev/vulnerability/CVE-2025-1411 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07293 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1411 · Security Note
• https://twitter.com/cracbot/status/1936016214587064604 · Twitter Post
• https://twitter.com/threatsbank/status/1934889250173956201 · Twitter Post
• https://ibm.com/support/pages/node/7236658 · Vendor Advisory, Patch
• https://ibm.com/docs/en/svd/10.0.3?topic=documentation-containers · Note
• https://t.me/cvenotify/125714 · Telegram Post
• https://t.me/cvetracker/26253 · Telegram Post
• https://t.me/latest_high_impact_cve/2660 · Telegram Post
• https://t.me/cveNotify/131716 · Telegram Post
• https://twitter.com/CVEnew/status/1934235366552453290 · Twitter Post
• https://twitter.com/cracbot/status/1935653838402232477 · Twitter Post