6.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.
Basic Information
ID
CVE-2025-36063
Source
ibm
Published
Jan 20, 2026 at 15:10
Modified
Jan 20, 2026 at 15:39
Affected Product
Vendor
IBM
Product
Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0
Version
5.2.0.00
Affected Versions
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00