CVE-2026-81209: Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

Q: Who can exploit this issue?

A remote attacker must already be authenticated and have high privileges. The issue exposes sensitive information through improperly logged credentials.

Q: Which deployments are affected?

Affected versions are IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, and 6.2.2.0 through 6.2.2.1_1. The advisory also specifically identifies IBM Sterling B2B Integrator Standard Edition.

Q: What is the likely impact?

The impact is disclosure of sensitive information, including credentials recorded in logs. The provided vector indicates no integrity or availability impact.

Published Oct 21, 2026

Updated

IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.21, 6.2.2.0 - 6.2.2.11 Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials.

Other sources

IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to obtain sensitive information due to improper logging of sensitive credentials.

— IBM

Affected Software

2 affected components

IBM Sterling B2B Integrator<=6.2.1.0 - 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1

IBM Sterling File Gateway<=6.2.1.0 - 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Sterling B2B Integrator and IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.1.3Patch IT49839
Upgrade
Upgrade IBM Sterling B2B Integrator and IBM Sterling File Gateway to a version that resolves this vulnerability.
Fixed in 6.2.2.2Patch IT49839

Event History

Oct 21, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·06:40 PM

Data Sourced

via MITRE·06:40 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7293291

Frequently Asked Questions

Who can exploit this issue?

A remote attacker must already be authenticated and have high privileges. The issue exposes sensitive information through improperly logged credentials.

Which deployments are affected?

Affected versions are IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, and 6.2.2.0 through 6.2.2.1_1. The advisory also specifically identifies IBM Sterling B2B Integrator Standard Edition.

What is the likely impact?

The impact is disclosure of sensitive information, including credentials recorded in logs. The provided vector indicates no integrity or availability impact.

CVE-2026-81209: Sensitive Information in Log files affects IBM Sterling B2B Integrator and IBM Sterling File Gateway

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the likely impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the likely impact?