VULNERABILITY INTELLIGENCE

CVE-2025-36002

CVSS score5.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2025-10-16
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

Weakness classification

  • psirt@us.ibm.com: CWE-260
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-256

Primary references