IBM Security Verify Information Queue Privilege Escalation Vulnerability

A vulnerability in IBM Security Verify Information Queue versions 10.0.5, 10.0.6, 10.0.7, and 10.0.8 allows a privileged user to escalate privileges and increase the attack surface on the host. This issue arises because the application’s containers run with unnecessary privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation.

Remediation

Users are advised to update to IBM Security Verify Information Queue version 10.0.11. The latest ISIQ images for v10.0.11 can be downloaded from the IBM Security Information Queue Starter Kit page.