CVE 3.7 LOW

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure_CVE-2025-36134

3.7 / 10
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.

Basic Information

ID CVE-2025-36134
Source ibm
Published Nov 25, 2025 at 14:40
Modified Nov 25, 2025 at 14:49

Affected Product

Vendor IBM
Product Sterling B2B Integrator
Version 6.0.0.0
Affected Versions IBM Sterling B2B Integrator 6.0.0.0
IBM Sterling B2B Integrator 6.2.0.0
IBM Sterling B2B Integrator 6.2.1.1
IBM Sterling File Gateway 6.0.0.0
IBM Sterling File Gateway 6.2.0.0
IBM Sterling File Gateway 6.2.1.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.