← CVE Intelligence

CVE-2025-36115

Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX. PUBLISHED

Description (CNA)

IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.

Affected (CNA)

Vendor / productVersions
IBM / Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0affected 5.2.0.00 through 5.2.0.12

CWE

CWE-384

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.