IBM Security Verify Access and IBM Verify Identity Access Arbitrary Code Execution Vulnerability

A vulnerability allowing local users to execute arbitrary code has been identified in IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.0.9, as well as in IBM Verify Identity Access version 11.0.0.0. This issue arises from improper restrictions on code generation, which could be exploited by local users to inject and execute malicious code.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of arbitrary code on the affected system.

Remediation

Users are advised to update to IBM Security Verify Access version 10.0.9.0_IF1 or IBM Verify Identity Access version 11.0.0.0_IF1. Instructions for downloading these updates are available on the IBM Support Fix Central website. For containerized environments, refer to the IBM Security Verify Access Containers documentation.