Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-36119

IBM i authentication bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions in DCM as an administrator.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM i

Default version status: unaffected

  • 7.3affected
  • 7.4affected
  • 7.5affected
  • 7.6affected

References