IBM Sterling B2B Integrator and File Gateway Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Sterling B2B Integrator and IBM Sterling File Gateway. This vulnerability could allow an unauthorized user to access sensitive server IP configuration information. It affects versions 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.5, and 6.2.1.1.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive server IP configuration information.

Remediation

Users can upgrade to IBM Sterling B2B Integrator or IBM Sterling File Gateway versions 6.1.2.7_2, 6.2.0.5_1 or 6.2.1.1_1. The IIM versions of these releases are available on Fix Central, and the container versions are available in the IBM Entitled Registry.