CVE-2025-36002

MEDIUM

IBM Sterling B2B Integrator & File Gateway <6.2.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory patch
https://www.ibm.com/support/pages/node/7248129

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 3.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-260 CWE-256
Status published
Products (4)
ibm/sterling_b2b_integrator 6.2.1.0
ibm/sterling_b2b_integrator 6.2.0.0 - 6.2.0.5_1
ibm/sterling_file_gateway 6.2.1.0
ibm/sterling_file_gateway 6.2.0.0 - 6.2.0.5_1
Published Oct 16, 2025
Tracked Since Feb 18, 2026