PT-2025-33847

CVE-2025-2988

·

Published

2025-08-19

·

Updated

2025-09-17

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.7 IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4 IBM Sterling B2B Integrator and IBM Sterling File Gateway version 6.2.1.0
Description: The software could disclose sensitive server information to an unauthorized user, which could assist in further attacks against the system.
Recommendations: Update IBM Sterling B2B Integrator and IBM Sterling File Gateway to a version later than 6.1.2.7. Update IBM Sterling B2B Integrator and IBM Sterling File Gateway to a version later than 6.2.0.4. Update IBM Sterling B2B Integrator and IBM Sterling File Gateway to a version later than 6.2.1.0.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Related identifiers
CVE-2025-2988
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com