CVEvulnerability
CVE-2025-36359
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-06-30
- Last modified
- 2026-10-06
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-613
Description
IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow an authenticated user to impersonate another user on the system.
Affected configurations
• ibm devops automation 1.0.1
• ibm devops loop 1.0.2
Related
Weakness · not in database (1)
References
- https://www.ibm.com/support/pages/node/7277970 Vendor Advisory