Sensitive Cookie Disclosure in IBM Sterling B2B Integrator and Gateway

CVE-2025-36134

What is CVE-2025-36134?

IBM's Sterling B2B Integrator and Sterling File Gateway are susceptible to a security issue that could lead to the exposure of sensitive information. The vulnerability arises from the absence or misconfiguration of the SameSite attribute on certain cookies, potentially allowing unauthorized access to confidential data. It is crucial for users of affected versions to examine their configurations and apply necessary patches to ensure the security of their systems.

References