CVE-2025-0163: IBM Security Verify Access

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts.

Affected products

• IBM Security Verify Access: from 10.0.0, before 10.0.9 (fixed in 10.0.9)
• IBM Security Verify Access Docker: from 10.0.0, before 10.0.9 (fixed in 10.0.9)

Published 2025-06-11. Last modified 2026-06-17.