IBM Sterling B2B Integrator and File Gateway Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in IBM Sterling B2B Integrator and IBM Sterling File Gateway. This vulnerability affects versions 6.0.0.0 through 6.1.2.6, as well as 6.2.0.0 through 6.2.0.4. The vulnerability allows an attacker to perform malicious and unauthorized actions by exploiting the trust that the application has in a user's interactions.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of a user, potentially allowing attackers to manipulate data or application behavior without proper authorization.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.7, 6.2.0.5, or 6.2.1.0. The IIM and container versions of these releases are available on Fix Central and in the IBM Entitled Registry, respectively.