by Kastro
Paper/Archive/CVE-2025-36356

CVE-2025-36356

IBM Security Verify Access Appliance — IBM Security Verify Access privilege escalation

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 9.0.090 × 201.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.

Affected

ProductAffectedFixed inSource
Security Verify Access Appliance10.0.0.0 – 10.0.9.0 IF2–CNA
Security Verify Access Appliance11.0.0.0 – 11.0.1.0–CNA
Security Verify Access Docker10.0.0.0 – 10.0.9.0 IF2–CNA
Security Verify Access Docker11.0.0.0 – 11.0.1.0–CNA

Scores by source

ibm (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

patchibm.com/support/pages/node/7247215