PT-2026-20249 · Ibm · Ibm Sterling B2B Integrator+1

CVE-2025-36348 · Publicado 2026-02-17 · Atualizado 2026-02-18

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7 2 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.5 IBM Sterling B2B Integrator versions 6.2.1.0 through 6.2.1.1 IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7 2 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.1

Description The application may expose sensitive information to a remote privileged attacker due to the application returning detailed technical error messages in the browser.

Recommendations IBM Sterling B2B Integrator versions 6.1.0.0 through 6.1.2.7 2 should be updated. IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.5 should be updated. IBM Sterling B2B Integrator versions 6.2.1.0 through 6.2.1.1 should be updated. IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7 2 should be updated. IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 should be updated. IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.1 should be updated.

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2025-36348

Produtos afetados

Ibm Sterling B2B Integrator

Ibm Sterling File Gateway

Referências · 6

• https://osv.dev/vulnerability/CVE-2025-36348 · Aviso do Fabricante
• https://ibm.com/support/pages/node/7259769 · Correção, Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-36348 · Nota de Segurança
• https://t.me/CVEtracker/44917 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2023901971350954414 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2023918419217727629 · Publicação no Twitter