CVE-2025-36117 — IBM Db2 Mirror for i session fixation
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Published: 2025-07-23 · CVSS: 6.3 · CVSS 3.1
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7