{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-3482", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-03-03T14:50:55.686Z", "datePublished": "2026-07-22T18:06:00.762Z", "dateUpdated": "2026-07-23T13:58:49.327Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-07-22T18:06:00.762Z" }, "title": "IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-639", "description": "CWE-639 Authorization bypass through User-Controlled key", "type": "CWE" } ] } ], "affected": [ { "vendor": "IBM", "product": "Sterling B2B Integrator", "versions": [ { "status": "affected", "version": "6.2.0.0", "lessThanOrEqual": "6.2.0.5_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.1.0", "lessThanOrEqual": "6.2.1.1_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.2.0", "lessThanOrEqual": "6.2.2.0_1", "versionType": "semver" } ], "defaultStatus": "unaffected" }, { "vendor": "IBM", "product": "Sterling File Gateway", "versions": [ { "status": "affected", "version": "6.2.0.0", "lessThanOrEqual": "6.2.0.5_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.1.0", "lessThanOrEqual": "6.2.1.1_2", "versionType": "semver" }, { "status": "affected", "version": "6.2.2.0", "lessThanOrEqual": "6.2.2.0_1", "versionType": "semver" } ], "defaultStatus": "unaffected" } ], "cpeApplicability": [ { "operator": "OR", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.0.0", "versionEndIncluding": "6.2.0.5_2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.1.0", "versionEndIncluding": "6.2.1.1_2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.2.0", "versionEndIncluding": "6.2.2.0_1" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.0.0", "versionEndIncluding": "6.2.0.5_2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.1.0", "versionEndIncluding": "6.2.1.1_2" }, { "vulnerable": true, "criteria": "cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2.2.0", "versionEndIncluding": "6.2.2.0_1" } ] } ] } ], "descriptions": [ { "lang": "en", "value": "IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request." } ] } ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7280657", "tags": [ "vendor-advisory", "patch" ] } ], "metrics": [ { "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ], "cvssV3_1": { "version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } } ], "solutions": [ { "lang": "en", "value": "ProductVersionAPARRemediation & FixIBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT49168     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49168     Apply B2Bi 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT49168    Apply B2Bi 6.2.2.1\n\n\n\n \n\n\n\nThe IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on  Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes . \n\n\n\nThe container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "
ProductVersionAPARRemediation & Fix
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT49168     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49168     Apply B2Bi 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT49168    Apply B2Bi 6.2.2.1

 

The IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on Fix Central. 

The container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.


" } ] } ], "source": { "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 1.0.4" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-07-23T13:58:37.428339Z", "id": "CVE-2026-3482", "options": [ { "Exploitation": "none" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-23T13:58:49.327Z" } } ] } }