IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7240351 |
Configurations
No configuration.
History
23 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-23 15:15
Updated : 2025-07-25 15:29
NVD link : CVE-2025-36117
Mitre link : CVE-2025-36117
CVE.ORG link : CVE-2025-36117
JSON object : View
Products Affected
No product.
CWE
CWE-384
Session Fixation