Arbitrary Code Execution Vulnerability in IBM Security Verify Access Appliance
CVE-2025-0161
7.8HIGH
Summary
The IBM Security Verify Access Appliance is susceptible to a vulnerability that permits local users to execute arbitrary code. This vulnerability arises from inadequate restrictions on code generation, potentially leading to unauthorized command execution. Users with local access could exploit this flaw, highlighting the importance of updating to the secured versions. For further details, please refer to the vendor advisory.
Affected Version(s)
Security Verify Access 10.0.0.0 <= 10.0.0.9
Security Verify Access 11.0.0.0
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved