CVE-2025-36119 – IBM Digital Certificate Manager for i Web Session Hijacking Privilege Escalation

CVE ID : CVE-2025-36119

Published : Aug. 8, 2025, 3:15 p.m. | 15 minutes ago

Description : IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions in DCM as an administrator.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…