IBM Sterling B2B Integrator and File Gateway Untrusted Web Link Vulnerability Allowing Information Exposure and Unauthorized Actions

A vulnerability exists in IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4. The issue arises from the use of web links that reference untrusted external sites, potentially allowing remote attackers to expose sensitive information or perform unauthorized actions on the victims' web browsers.

Impact

Exploitation of this vulnerability could lead to the exposure of sensitive information or unauthorized actions being performed on the victims' web browsers.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.7_1, 6.2.0.5, or 6.2.1.0. The IIM and container versions of these releases are available on Fix Central and in the IBM Entitled Registry, respectively.