CVE-2026-12737: IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

Q: Who can exploit this issue?

A local privileged user who can read the affected log files could access potentially sensitive information recorded in them. The provided data does not indicate that remote or unprivileged users can exploit it.

Q: Which releases are affected?

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1_1 are affected.

Q: What is the impact if the issue is exploited?

The impact is disclosure of potentially sensitive information stored in log files. The supplied severity vector indicates confidentiality impact only, with no stated integrity or availability impact.

Published Oct 22, 2026

Updated

IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.11 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.11 stores potentially sensitive information in log files that could be read by a local privileged user.

Other sources

IBM Sterling B2B Integrator and IBM Sterling File Gateway stores potentially sensitive information in log files that could be read by a local privileged user.

— IBM

Affected Software

2 affected components

IBM Sterling B2B Integrator<=6.2.2.0 - 6.2.2.1_1

IBM Sterling File Gateway<=6.2.2.0 - 6.2.2.1_1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Sterling B2B Integrator to a version that resolves this vulnerability.
Fixed in 6.2.2.2Patch IT49777
Upgrade
Upgrade IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.2.2Patch IT49777

Event History

Oct 22, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·05:14 PM

Data Sourced

via MITRE·05:14 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7293719

Frequently Asked Questions

Who can exploit this issue?

A local privileged user who can read the affected log files could access potentially sensitive information recorded in them. The provided data does not indicate that remote or unprivileged users can exploit it.

Which releases are affected?

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1_1 are affected.

What is the impact if the issue is exploited?

The impact is disclosure of potentially sensitive information stored in log files. The supplied severity vector indicates confidentiality impact only, with no stated integrity or availability impact.

CVE-2026-12737: IBM Sterling B2B Integrator and IBM Sterling File Gateway affected by Exposure of Sensitive Information in Logs Vulnerability

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who can exploit this issue?

Which releases are affected?

What is the impact if the issue is exploited?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which releases are affected?

What is the impact if the issue is exploited?