Critical · published October 6, 2025
🚨 A locally authenticated user can take over as root! This privilege escalation vulnerability affects IBM Security Verify Access versions 10.0.0.0 to 10.0.9.0 and 11.0.0.0 to 11.0.1.0, and it’s about as serious as it gets! 🔥 Think of it like a hotel where a guest finds a hidden key to the manager's office and can start changing bookings, accessing sensitive information, or even shutting down the entire operation – talk about a nightmare for the management! An attacker with local access could elevate their privileges to root, allowing them to execute any command they want. This means they could manipulate data, alter configurations, and even compromise the entire system. The implications? Absolute chaos and a major security breach that could put sensitive information at risk!
Think of it like a hotel where a guest finds a hidden key to the manager's office and can start changing bookings, accessing sensitive information, or even shutting down the entire operation – talk about a nightmare for the management! This vulnerability arises from the system executing with more privileges than necessary, allowing a locally authenticated user to escalate their privileges to root without proper authorization checks.
An attacker with local access could elevate their privileges to root, allowing them to execute any command they want. This means they could manipulate data, alter configurations, and even compromise the entire system. The implications? Absolute chaos and a major security breach that could put sensitive information at risk! Immediately update your IBM Security Verify Access to the latest version to close this security gap. Review and restrict access permissions to ensure that only authorized users have local access—and keep an eye on your security configurations to prevent future exploits! You've got this! Tackling vulnerabilities like this one puts you in the spotlight as a true security hero! 🦸
| Product | Versions | Fixed in |
|---|---|---|
| ibm/security_verify_access | ≥ 10.0.0.0, < 10.0.9.0 | 10.0.9.0 |
| ibm/security_verify_access | all versions | — |
| ibm/security_verify_access | all versions | — |
| ibm/security_verify_access | all versions | — |
| ibm/security_verify_access_docker | ≥ 10.0.0.0, < 10.0.9.0 | 10.0.9.0 |
| ibm/security_verify_access_docker | all versions | — |
| ibm/security_verify_access_docker | all versions | — |
| ibm/security_verify_access_docker | all versions | — |
| ibm/verify_identity_access | ≥ 11.0.0.0, < 11.0.1.0 | 11.0.1.0 |
| ibm/verify_identity_access | all versions | — |
| ibm/verify_identity_access_docker | ≥ 11.0.0.0, < 11.0.1.0 | 11.0.1.0 |
| ibm/verify_identity_access_docker | all versions | — |