Vulnerability Description
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Verify Access | >= 10.0.0.0, < 10.0.9.0 |
| Ibm | Security Verify Access Docker | >= 10.0.0.0, < 10.0.9.0 |
| Ibm | Verify Identity Access | >= 11.0.0.0, < 11.0.1.0 |
| Ibm | Verify Identity Access Docker | >= 11.0.0.0, < 11.0.1.0 |
Related Weaknesses (CWE)
References
- https://www.ibm.com/support/pages/node/7247215PatchVendor Advisory
FAQ
What is CVE-2025-36356?
CVE-2025-36356 is a vulnerability with a CVSS score of 9.3 (CRITICAL). IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root d...
How severe is CVE-2025-36356?
CVE-2025-36356 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-36356?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Verify Access, Ibm Security Verify Access Docker, Ibm Verify Identity Access, Ibm Verify Identity Access Docker.