Session Management Vulnerability in IBM Sterling Connect:Express Adapter for B2B Integrator
CVE-2025-36115

6.3MEDIUM

Key Information:

Vendor

IBM
Status
Sterling Connect:express Adapter For Sterling B2b Integrator 5.2.0
Vendor
CVE Published:
20 January 2026

What is CVE-2025-36115?

The IBM Sterling Connect:Express Adapter for Sterling B2B Integrator versions 5.2.0.00 through 5.2.0.12 lacks proper session management, allowing authenticated users to retain their session ID after use. This vulnerability could enable a malicious user to impersonate another authenticated user, potentially leading to unauthorized access and significant security risks.

Affected Version(s)

Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 <= 5.2.0.12

References

https://www.ibm.com/support/pages/node/7257244
vendor-advisorypatch

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.