Web Session Hijacking Vulnerability in IBM Digital Certificate Manager

CVE-2025-36119

What is CVE-2025-36119?

IBM Digital Certificate Manager for i (DCM) presents a web session hijacking vulnerability that allows an authenticated user to gain elevated privileges. This flaw could permit unauthorized actions within the DCM environment as if they had administrative privileges, posing significant security risks for organizations relying on IBM i versions 7.3, 7.4, 7.5, and 7.6. It is crucial for users and administrators to be aware of this vulnerability and implement recommended patches and security measures to mitigate potential exploitation. For more details, please refer to IBM's official advisory.

References