CVE-2026-19273: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
Other sources
IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Sterling B2B Integrator Standard Editionto a version that resolves this vulnerability.Fixed in 6.2.1.2_1Patch IT49630 - Upgrade
Upgrade
IBM Sterling B2B Integrator Standard Editionto a version that resolves this vulnerability.Fixed in 6.2.2.1_1Patch IT49630 - Upgrade
Upgrade
IBM Sterling File Gatewayto a version that resolves this vulnerability.Fixed in 6.2.1.2_1Patch IT49630 - Upgrade
Upgrade
IBM Sterling File Gatewayto a version that resolves this vulnerability.Fixed in 6.2.2.1_1Patch IT49630
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of IBM Sterling B2B Integrator or IBM Sterling File Gateway Standard Edition in the listed 6.2.0.x, 6.2.1.x, and 6.2.2.x version ranges are affected. The issue is exposed through the Dashboard.
What does an attacker need to exploit it?
An attacker must be remote and authenticated. No user interaction is required, and the attack complexity is rated low.
What could exploitation allow?
A successful attacker could bypass security restrictions. The stated impact includes low confidentiality and low integrity impact, with no availability impact.