Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-36087

Опубликовано: 13 окт. 2025
Источник: nvd
CVSS3: 8.1
CVSS3: 9.8
EPSS Низкий

Описание

IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*
Версия от 10.0.0 (включая) до 10.0.9 (включая)
cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 16%
0.0005
Низкий

8.1 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 8.1
github
4 месяца назад

IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

EPSS

Процентиль: 16%
0.0005
Низкий

8.1 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-798