IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.7, 6.2.0.0 through 6.2.0.4, and 6.2.1.0 may disclose sensitive server information to unauthorized users. This vulnerability could potentially aid attackers in executing further attacks against the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.7 | CVE-2025-2988 |
Exploitation
To exploit this vulnerability, an attacker would need to have high privileges and could potentially access sensitive server information over the network. This could be achieved by sending crafted requests to the affected systems, which may lead to unauthorized information disclosure.
Affected Products
- IBM Sterling B2B Integrator 6.0.0.0 to 6.1.2.7: A platform for secure B2B integration.
- IBM Sterling File Gateway 6.2.0.0 to 6.2.0.4: A solution for secure file transfer and management.
- IBM Sterling File Gateway 6.2.1.0: The latest version of the file gateway with potential vulnerabilities.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest versions of IBM Sterling B2B Integrator and IBM Sterling File Gateway. Additionally, implementing strict access controls and monitoring network traffic can help prevent unauthorized access.