IBM Sterling B2B Integrator and File Gateway Improper Cache Management Vulnerability

A vulnerability exists in IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4. This vulnerability could allow a local user to access sensitive information from another user's web browser cache, as the applications do not implement an appropriate caching policy.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information stored in the web browser cache.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.7, 6.2.0.5, or 6.2.1.0. The IIM versions of these releases are available on Fix Central, while the container versions can be found in the IBM Entitled Registry.