CVE-2021-39070: IBM Security Verify Access

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an attacker to authenticate as any user on the system. IBM X-Force ID: 215353.

Affected products

• IBM Security Verify Access: version 10.0.0 only; version 10.0.1.0 only; version 10.0.2.0 only
• IBM Security Verify Access Docker: version 10.0.0 only; version 10.0.1.0 only; version 10.0.2.0 only

Published 2022-02-02. Last modified 2026-06-17.