← CVE Intelligence

CVE-2025-36134

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure PUBLISHED

Description (CNA)

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.5 and 6.2.1.1 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie.

Affected (CNA)

Vendor / productVersions
IBM / Sterling B2B Integratoraffected 6.0.0.0 through 6.1.2.7; affected 6.2.0.0 through 6.2.0.5; affected 6.2.1.1
IBM / Sterling File Gatewayaffected 6.0.0.0 through 6.1.2.7; affected 6.2.0.0 through 6.2.0.5; affected 6.2.1.1

CWE

CWE-1275

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.