3.7
/ 10
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.
Basic Information
ID
CVE-2025-36134
Source
ibm
Published
Nov 25, 2025 at 14:40
Modified
Nov 25, 2025 at 14:49
Affected Product
Vendor
IBM
Product
Sterling B2B Integrator
Version
6.0.0.0
Affected Versions
IBM Sterling B2B Integrator 6.0.0.0
IBM Sterling B2B Integrator 6.2.0.0
IBM Sterling B2B Integrator 6.2.1.1
IBM Sterling File Gateway 6.0.0.0
IBM Sterling File Gateway 6.2.0.0
IBM Sterling File Gateway 6.2.1.1
IBM Sterling B2B Integrator 6.2.0.0
IBM Sterling B2B Integrator 6.2.1.1
IBM Sterling File Gateway 6.0.0.0
IBM Sterling File Gateway 6.2.0.0
IBM Sterling File Gateway 6.2.1.1