← Back

CVE-2025-36002

nvd nist
Published: Oct 16, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

Affected (4)

Ibm
2 products
Sterling B2b Integrator
Sterling File Gateway
Configuration A
4 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Ibm
Sterling B2b Integrator
From 6.2.0.0 to 6.2.0.5_1
Sterling B2b Integrator
Version 6.2.1.0
Ibm
Sterling File Gateway
From 6.2.0.0 to 6.2.0.5_1
Sterling File Gateway
Version 6.2.1.0
Running on/withPlatform Versions
Ibm
Aix
All versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-256
Plaintext Storage of a Password
Storing a password in plaintext may result in a system compromise.
CWE-260
Password in Configuration File
The product stores a password in a configuration file that might be accessible to actors who do not know the password.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.