PT-2025-40919 · Ibm · Ibm Security Verify Access Docker+1

Published 2025-10-06 · Updated 2025-12-15 · CVE-2025-36355

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access and IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.9.0 IBM Security Verify Access and IBM Security Verify Access Docker versions 11.0.0.0 through 11.0.1.0

Description A locally authenticated user may be able to execute malicious scripts from outside of the software’s control.

Recommendations Update IBM Security Verify Access to a version later than 10.0.9.0. Update IBM Security Verify Access Docker to a version later than 11.0.1.0.

Fix

Weakness Enumeration

CWE-829

Related Identifiers

BDU:2025-13674

CVE-2025-36355

Affected Products

Ibm Security Verify Access

Ibm Security Verify Access Docker

References · 8

• https://bdu.fstec.ru/vul/2025-13674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36355 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36355 · Vendor Advisory
• https://t.me/cveNotify/145805 · Telegram Post
• https://t.me/CVEtracker/34246 · Telegram Post
• https://ibm.com/support/pages/node/7247215 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1975248352569659503 · Twitter Post
• https://twitter.com/autumn_good_35/status/1975559884625297846 · Twitter Post