Security Bulletin: Several Security Vulnerabilities have been discovered in IBM Security Verify Access and IBM Verify Identity Access products. (CVE-2025-36354, CVE-2025-36355, CVE-2025-363546)
Regarding the vulnerability in the article linked above, does this mean that after logging in to the ISVA console, it is possible to perform operations beyond the given permissions?
Would suspending any non-administrator accounts that can log in to the ISVA console be a workaround?