Back to overview

CVE-2026-1918

MEDIUM
4.9
CVSS 3.1
Description
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 stores potentially sensitive information in log files that could be read by a privileged user.

Metadata

CVE ID
CVE-2026-1918
State
PUBLISHED
Assigner
ibm
Reserved
2026-02-04 16:31 UTC
Published
2026-07-28 19:45 UTC
Last updated
2026-07-28 19:45 UTC
Primary CWE
CWE-532
CWE-532 Insertion of Sensitive Information into Log File
Vendor / Product
IBM / Sterling B2B Integrator
Sources
cve.org  ·  NVD

Severity & Metrics

4.9 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products (2)
VendorProductPlatformVersions
IBM Sterling B2B Integrator — 6.2.0.0 ≤ 6.2.0.5_2, 6.2.1.0 ≤ 6.2.1.1_2, 6.2.2.0 ≤ 6.2.2.0_1
IBM Sterling File Gateway — 6.2.0.0 ≤ 6.2.0.5_2, 6.2.1.0 ≤ 6.2.1.1_2, 6.2.2.0 ≤ 6.2.2.0_1
Weakness (CWE)
CWESourceDescription
CWE-532 cna CWE-532 Insertion of Sensitive Information into Log File
CVSS scores (1)
ScoreSeverityVersionSourceVector
4.9 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
References (1)
Back to overview