{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-3157", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-02-24T20:52:02.974Z", "datePublished": "2026-07-28T19:40:18.276Z", "dateUpdated": "2026-07-29T14:03:29.656Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-07-28T19:40:18.276Z" }, "title": "Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-615", "description": "CWE-615 Inclusion of Sensitive Information in Source Code Comments", "type": "CWE" } ] } ], "affected": [ { "vendor": "IBM", "product": "Sterling B2B Integrator", "versions": [ { "status": "affected", "version": "6.2.0.0", "lessThanOrEqual": "6.2.0.5_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.1.0", "lessThanOrEqual": "6.2.1.1_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.2.0", "lessThanOrEqual": "6.2.2.0_1", "versionType": "semver" } ], "cpes": [ "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.0.5_2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.1.1_2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.2.0_1:*:*:*:*:*:*:*" ] }, { "vendor": "IBM", "product": "Sterling File Gateway", "versions": [ { "status": "affected", "version": "6.2.0.0", "lessThanOrEqual": "6.2.0.5_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.1.0", "lessThanOrEqual": "6.2.1.1_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.2.0", "lessThanOrEqual": "6.2.2.0_1", "versionType": "semver" } ], "cpes": [ "cpe:2.3:a:ibm:sterling_file_gateway:6.2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_file_gateway:6.2.0.5_2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_file_gateway:6.2.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_file_gateway:6.2.1.1_2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_file_gateway:6.2.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:sterling_file_gateway:6.2.2.0_1:*:*:*:*:*:*:*" ] } ], "descriptions": [ { "lang": "en", "value": "IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information being included in the source code comments of a mailbox component.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information being included in the source code comments of a mailbox component.

" } ] } ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7280665", "tags": [ "vendor-advisory", "patch" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV3_1": { "version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } } ], "solutions": [ { "lang": "en", "value": "ProductVersionAPARRemediation & FixIBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT48984     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT48984     Apply B2Bi 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT48984     Apply B2Bi 6.2.2.1\n\n\n\n\n\n\n\nThe IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on  Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes . \n\n\n\nThe container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "
ProductVersionAPARRemediation & Fix
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT48984     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT48984     Apply B2Bi 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT48984     Apply B2Bi 6.2.2.1

The IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on Fix Central. 

The container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.

" } ] } ], "x_generator": { "engine": "ibm-cvegen" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-07-29T14:03:15.620576Z", "id": "CVE-2026-3157", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-29T14:03:29.656Z" } } ] } }