CVE-2025-36002

MEDIUM

5.5

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration files which can be read by a local user.

CVE Details

CVSS v3.1 Score5.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published10/16/2025

Last Modified10/25/2025

Sourcenvd

Honeypot Sightings0

Affected Products

ibm:aixibm:sterling_b2b_integratoribm:sterling_file_gatewaylinux:linux_kernelmicrosoft:windows

Weaknesses (CWE)

CWE-260CWE-256

References

https://www.ibm.com/support/pages/node/7248129(psirt@us.ibm.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.