PT-2025-40920 · Ibm · Ibm Security Verify Access Docker+1

Published

2025-10-06

·

Updated

2025-12-15

·

CVE-2025-36356

CVSS v3.1

9.3

Critical

VectorAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access and IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.9.0 IBM Security Verify Access and IBM Security Verify Access Docker versions 11.0.0.0 through 11.0.1.0
Description A locally authenticated user may be able to escalate their privileges to root due to execution with more privileges than required. The issue allows for local-to-root privilege escalation and is considered trivial for any authenticated user.
Recommendations Update IBM Security Verify Access to a version beyond 10.0.9.0 Update IBM Security Verify Access Docker to a version beyond 11.0.1.0

Fix

LPE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-13673
CVE-2025-36356

Affected Products

Ibm Security Verify Access
Ibm Security Verify Access Docker