Arbitrary Code Execution Vulnerability in IBM Security Verify Access Appliance
CVE-2025-0161

7.8HIGH

Key Information:

Vendor
IBM
Status
Security Verify Access
Vendor
CVE Published:
20 February 2025

Summary

The IBM Security Verify Access Appliance is susceptible to a vulnerability that permits local users to execute arbitrary code. This vulnerability arises from inadequate restrictions on code generation, potentially leading to unauthorized command execution. Users with local access could exploit this flaw, highlighting the importance of updating to the secured versions. For further details, please refer to the vendor advisory.

Affected Version(s)

Security Verify Access 10.0.0.0 <= 10.0.0.9

Security Verify Access 11.0.0.0

References

https://www.ibm.com/support/pages/node/7183788
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.