Credential Storage Vulnerability in IBM Sterling B2B Integrator and File Gateway
CVE-2025-36002

5.5MEDIUM

Key Information:

Vendor

IBM
Status
Sterling B2b Integrator
Sterling File Gateway
Vendor
CVE Published:
16 October 2025

What is CVE-2025-36002?

The vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.5 and 6.2.1.0. It arises from the insecure storage of user credentials within configuration files, which can be easily accessed by local users. This exposure could lead to unauthorized access and manipulation of sensitive information.

Affected Version(s)

Sterling B2B Integrator 6.2.0.0 <= 6.2.0.5

Sterling B2B Integrator 6.2.1.0

Sterling File Gateway 6.2.0.0 <= 6.2.0.5

References

https://www.ibm.com/support/pages/node/7248129
vendor-advisorypatch

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-36002 : Credential Storage Vulnerability in IBM Sterling B2B Integrator and File Gateway