VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 23, 2025· Updated Aug 18, 2025

IBM Db2 Mirror for i session fixation

CVE-2025-36117

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.

Affected products

2
  • IBM/Db2 Mirror for iv5
    cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*
    Range: 7.4, 7.5, 7.6
  • IBM/Db2 Mirror for illm-create
    Range: 7.4, 7.5, 7.6

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.