IBM Db2 Mirror for i
Moderate fix3 remedies
cpe:2.3:a:ibm:db2_mirror_for_i:*:*:*:*:*:*:*
Moderate fix3 remedies
- 7.4
- 7.5
- 7.6
IBM Db2 Mirror for i Session Fixation Vulnerability Allowing User Impersonation
Vulnerability
A session fixation vulnerability has been identified in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. This vulnerability allows an authenticated user to impersonate another user by not properly invalidating the session ID after use.
Impact
Exploitation of this vulnerability could lead to unauthorized user impersonation within the application.
Remediation
Users can apply a Program Temporary Fix (PTF) to address this vulnerability. The PTF numbers for the fixed versions are SJ05739 for 7.4, SJ05742 for 7.5, and SJ05744 for 7.6. These PTFs can be downloaded from the IBM Support Fix Central website.
Added: Jul 23, 2025, 3:56 PM
Updated: Jul 23, 2025, 3:56 PM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
1.3exploitability
4.9remediation
7.7relevance
0.3threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.