Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-4938

Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow an attacker with read-only privileges to make unauthorized modifications and deployments outside of their assigned permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Verify Identity Access

  • 11.0 to ≤ 11.0.2affected

IBM Security Verify Access

  • 10.0 to ≤ 10.0.9.1affected

IBM Verify Identity Access Container

  • 11.0 to ≤ 11.0.2affected

IBM Security Verify Access Container

  • 10.0 to ≤ 10.0.9.1affected

References