IBM Sterling B2B Integrator and File Gateway Information Disclosure Vulnerability

A vulnerability exists in IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0. This vulnerability could allow authenticated users to access sensitive host information, which could be exploited in further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing authenticated users to access sensitive host details that could be used to launch additional attacks against the system.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.8, 6.2.0.5_2, 6.2.1.1_2 or 6.2.2.0_1. The IIM and container versions of these releases are available on Fix Central and in the IBM Entitled Registry, respectively.