CVEvulnerability

CVE-2025-36002

5.5 MEDIUM Published 2025-10-16 Modified 2026-10-18 Official page ↗
Status
Modified
Published
2025-10-16
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-256, CWE-260

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

Affected configurations

• ibm sterling b2b integrator (>= 6.2.0.0 < 6.2.0.5 1) • ibm sterling b2b integrator 6.2.1.0 • ibm sterling file gateway (>= 6.2.0.0 < 6.2.0.5 1) • ibm sterling file gateway 6.2.1.0

Related

Weakness · CWE (2)

  • CWE-256 Plaintext Storage of a Password weakness
  • CWE-260 Password in Configuration File weakness

References