IBM Sterling B2B Integrator and File Gateway Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Sterling B2B Integrator and IBM Sterling File Gateway. This vulnerability exists in versions 6.0.0.0 prior to 6.1.2.7, 6.2.0.0 prior to 6.2.0.4, and 6.2.1.0. The issue could allow an unauthorized user to access sensitive server information, potentially facilitating further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive server information, which could be used to conduct additional attacks against the system.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.7_1, 6.2.0.5, or 6.2.1.1. The IIM versions of these releases are available on Fix Central, while the container versions can be obtained from the IBM Entitled Registry.