CVE-2025-36356: IBM Security Verify Access privilege escalation
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36356?
CVE-2025-36356 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-36356?
To fix CVE-2025-36356, update your IBM Security Verify Access or IBM Security Verify Access Docker to versions beyond 10.0.9.0 and 11.0.1.0.
Who is affected by CVE-2025-36356?
CVE-2025-36356 affects users of IBM Security Verify Access and IBM Security Verify Access Docker within the specified version ranges.
What exploit does CVE-2025-36356 allow?
CVE-2025-36356 allows a locally authenticated user to escalate their privileges to root unintentionally.
Is there a workaround for CVE-2025-36356?
Currently, the recommended approach is to apply the appropriate software update as there are no officially documented workarounds.