Security Advisory

CVE-2025-36119

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-08 14:25:40
Last updated 2026-02-26 17:49:46
Assigner ibm
CVSS score 7.1
State PUBLISHED

Description

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions in DCM as an administrator.