Advisoriesby IbisIBMCVE-2026-12101
IBM Security Verify Access: administrator could execute additional commands...
No fix yet
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied requests.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Security Verify Access Product | >= 10.0.0, <= 10.0.9.2 Interim Fix 001 | No fix yet |
| Security Verify Access Container Product | >= 10.0.0, <= 10.0.9.2 Interim Fix 001 | No fix yet |
| Verify Identity Access Product | >= 11.0.0, <= 11.0.3 Interim Fix 001 | No fix yet |
| Verify Identity Access Container Product | >= 11.0.0, <= 11.0.3 Interim Fix 001 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-289