CVE-2025-36074: Security vulnerability has been detected in IBM Security Verify Directory
IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims for performing further attacks against the system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36074?
CVE-2025-36074 is a critical security vulnerability that allows malicious file uploads due to inadequate file type validation in IBM Security Verify Directory.
How do I fix CVE-2025-36074?
To fix CVE-2025-36074, upgrade IBM Security Verify Directory to a version beyond 10.0.0.3 where the vulnerability has been addressed.
Who is affected by CVE-2025-36074?
The affected users include those utilizing IBM Security Verify Directory or IBM Security Verify Directory (Container) versions 10.0.0 through 10.0.0.3.
What types of attacks can CVE-2025-36074 facilitate?
CVE-2025-36074 can facilitate attacks that exploit the ability to upload malicious files, potentially leading to data breaches or system compromise.
Is there a workaround for CVE-2025-36074?
Currently, there is no official workaround for CVE-2025-36074 other than upgrading to a patched version of the software.