Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-36087

IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Published

2025-10-13T01:15:48.583

Last Modified

2025-10-20T20:23:01.170

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-798
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm security_verify_access ≤ 10.0.9 Yes
Application ibm verify_identity_access 11.0.0 Yes
References