CVE-2025-36002
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.
- CVSS 3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-25)
- CWEs
- CWE-260, CWE-256
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:sterling_b2b_integrator
- ibm:sterling_file_gateway