Riskcovery

CVE-2025-36134

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

State
Published
Severity
3.7 Low
Published
Nov 25, 2025
Updated
Nov 25, 2025
Reserved
Apr 15, 2025

Read the record on cve.org

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.

Scores

CVSSScoreVectorSource
3.13.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:Nibm

Weaknesses

Affected Products

ProductVersions
Sterling B2B IntegratorIBM
  • 6.0.0.0 through 6.1.2.7Affected
  • 6.2.0.0 through 6.2.0.5Affected
  • 6.2.1.1Affected
Sterling File GatewayIBM
  • 6.0.0.0 through 6.1.2.7Affected
  • 6.2.0.0 through 6.2.0.5Affected
  • 6.2.1.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.