CVE-2025-36002

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@us.ibm.com

Published

2025-10-16

Last modified

2026-10-18

Weaknesses

CWE-256, CWE-260

Affected products

• Sterling B2b Integrator (Ibm)
• Sterling File Gateway (Ibm)

References

• https://www.ibm.com/support/pages/node/7248129