High · published October 6, 2025
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0
could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.
| Product | Versions | Fixed in |
|---|---|---|
| ibm/security_verify_access | ≥ 10.0.0.0, < 10.0.9.0 | 10.0.9.0 |
| ibm/security_verify_access | all versions | — |
| ibm/security_verify_access | all versions | — |
| ibm/security_verify_access | all versions | — |
| ibm/security_verify_access_docker | ≥ 10.0.0.0, < 10.0.9.0 | 10.0.9.0 |
| ibm/security_verify_access_docker | all versions | — |
| ibm/security_verify_access_docker | all versions | — |
| ibm/security_verify_access_docker | all versions | — |
| ibm/verify_identity_access | ≥ 11.0.0.0, < 11.0.1.0 | 11.0.1.0 |
| ibm/verify_identity_access | all versions | — |
| ibm/verify_identity_access_docker | ≥ 11.0.0.0, < 11.0.1.0 | 11.0.1.0 |
| ibm/verify_identity_access_docker | all versions | — |