CVE-2025-36356: Execution with Unnecessary Privileges

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required...

CVE-2025-36355: Inclusion of Functionality from Untrusted Control Sphere

IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...

CVE-2024-35142: Execution with Unnecessary Privileges

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418...

PT-2024-26335

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access Docker versions 10.0.0 through 10.0.6 Description The issue allows a local user to escalate their privileges due to the execution of unnecessary privileges. Recommendations For versions 10.0.0 through 10.0.6, update ...

Security Bulletin: Multiple Security Vulnerabilities were discovered in IBM Security Verify Access Container (CVE-2024-35140, CVE-2024-35141, CVE-2024-35142)

Summary Vulneribities were discovered during an assessment of the IBM Security Verify Access Container Product. They were addressed in the ISVA 10.0.7 release. Vulnerability Details CVEID:CVE-2024-35142 DESCRIPTION: IBM Security Verify Access could allow a local user to escalate their privileges...

CVE-2023-43016: Empty Password in Configuration File

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154...

CVE-2023-32329: Insufficient Verification of Data Authenticity

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a user to download files from an incorrect repository due to improper file validation. IBM X-Force ID: 254972...

CVE-2023-31001 IBM Security Access Manager Container information disclosure

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653...

CVE-2023-38267: Missing Encryption of Sensitive Data

IBM Security Access Manager Appliance IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 260584...

CVE-2023-31003: Improper Link Resolution Before File Access

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...

Security Bulletin: IBM Security Verify Access fixed a security vulnerability in the product.

Summary IBM Security Verify Access with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. Vulnerability Details CVEID: CVE-2021-39070 DESCRIPTION: IBM Security Verify Access with the advanced access control authentication...

CVE-2021-20537

IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID:198918...

PT-2021-13998

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks...

PT-2021-13996

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: The issue concerns the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM Securit...

PT-2021-14017

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2021-13966

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager version 9.0 IBM Security Verify Access Docker version 10.0.0 Description: The issue concerns the storage of user credentials in plain clear text, making them accessible to unauthorized users. Recommendations: For I...

PT-2021-13997

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: The issue allows version information to be revealed in HTTP requests, which could potentially be used in further attacks against the system. Recommendations: For IBM Security Verif...

PT-2021-13995

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: The issue allows an authenticated user to bypass input due to improper input validation. Recommendations: For IBM Security Verify Access Docker version 10.0.0, consider restricting...

PT-2021-14016

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information in further attacks again...

PT-2021-14023

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Docker version 10.0.0 Description: The issue allows a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. Recommendations: For IBM Security Verify Access...