This vulnerability (CWE-74) affects IBM Security Verify Access 10.0 through 10.0.9.2, IBM Verify Identity Access 11.0 through 11.0.3, and IBM Verify Identity Access Container 11.0 through 11.0.3. It arises from improper validation of user-supplied input, which could allow an administrator to execute additional commands they are not entitled to. The CVSS 3.1 base score is 7.2, indicating a high impact with network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An attacker with administrator privileges could exploit this vulnerability to execute unauthorized commands, potentially compromising the confidentiality, integrity, and availability of the affected system. This could lead to unauthorized actions beyond the intended administrative scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published at this time. Users should monitor IBM's advisories for updates and apply patches once available.