IBM Sterling B2B Integrator and File Gateway Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.5 and 6.2.1.0, as well as in IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 and 6.2.1.0. This vulnerability arises because user credentials are stored in configuration files that can be accessed by local users.

Impact

Exploitation of this vulnerability allows local users to read stored user credentials, potentially leading to unauthorized access or actions within the application.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway version 6.2.0.5_1 or 6.2.1.1. The IIM versions of 6.2.0.5_1 and 6.2.1.1 are available on Fix Central. The container versions of 6.2.0.5_1 and 6.2.1.1 are available in the IBM Entitled Registry.