PT-2025-41743

CVE-2025-36087

·

Published

2025-10-13

·

Updated

2025-10-20

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0.0 through 10.0.9 and 11.0.0 IBM Verify Identity Access Container versions 10.0.0 through 10.0.9 and 11.0.0
Description The software contains hard-coded credentials, such as passwords or cryptographic keys, used for inbound authentication, outbound communication to external components, or encryption of internal data. These credentials could potentially lead to unauthorized access.
Recommendations IBM Security Verify Access versions 10.0.0 through 10.0.9 should be updated. IBM Security Verify Access version 11.0.0 should be updated. IBM Verify Identity Access Container versions 10.0.0 through 10.0.9 should be updated. IBM Verify Identity Access Container version 11.0.0 should be updated.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾