IBM Verify Identity Access and IBM Security Verify Access Privilege Escalation Vulnerability

A vulnerability exists in IBM Verify Identity Access Container versions 11.0 through 11.0.2, IBM Security Verify Access Container versions 10.0 through 10.0.9.1, IBM Verify Identity Access versions 11.0 through 11.0.2, and IBM Security Verify Access versions 10.0 through 10.0.9.1. This vulnerability could allow a locally authenticated user to escalate privileges to root, as certain executions are carried out with more privileges than necessary.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain root access.

Remediation

Users are advised to update to IBM Verify Identity Access v11.0.2 IF1 or IBM Security Verify Access v10.0.9.1 IF1. For container users, the updated version can be downloaded from the IBM Security Verify Access documentation site.