← Back

CVE-2025-1348

nvd nist
Published: Jun 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.0
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.5 / Impact: 1.4
Source: psirt@us.ibm.com (Secondary)

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy.

Affected (4)

Ibm
2 products
Sterling B2b Integrator
Sterling File Gateway
Configuration A
4 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Ibm
Sterling B2b Integrator
From 6.0.0.0 to 6.1.2.7
Sterling B2b Integrator
From 6.2 to 6.2.0.5
Ibm
Sterling File Gateway
From 6.0.0.0 to 6.1.2.7
Sterling File Gateway
From 6.2.0.0 to 6.2.0.5
Running on/withPlatform Versions
Ibm
Aix
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-525
Use of Web Browser Cache Containing Sensitive Information
The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.