CVE-2026-3482
Received Received - Intake

IBM Sterling B2B Integrator Authentication Bypass

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: IBM Corporation

Description
IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-22
Last Modified
2026-07-22
Generated
2026-07-22
AI Q&A
2026-07-22
EPSS Evaluated
N/A
NVD
CVE-2026-3482
EUVD
EUVD-2026-47768

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
ibm sterling_b2b_integrator From 6.2.0.0 (inc) to 6.2.0.5_2 (inc)
ibm sterling_b2b_integrator From 6.2.1.0 (inc) to 6.2.1.1_2 (inc)
ibm sterling_b2b_integrator From 6.2.2.0 (inc) to 6.2.2.0_1 (inc)
ibm sterling_file_gateway From 6.2.0.0 (inc) to 6.2.0.5_2 (inc)
ibm sterling_file_gateway From 6.2.1.0 (inc) to 6.2.1.1_2 (inc)
ibm sterling_file_gateway From 6.2.2.0 (inc) to 6.2.2.0_1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated user to bypass authentication in IBM Sterling B2B Integrator and IBM Sterling File Gateway by sending a specially crafted HTTP request. This grants access to sensitive information without proper authorization.

Detection Guidance

Check IBM Sterling B2B Integrator and File Gateway versions against affected ranges (6.2.0.0-6.2.0.5_2, 6.2.1.0-6.2.1.1_2, 6.2.2.0-6.2.2.0_1). Monitor HTTP traffic for unusual requests bypassing authentication. Use network scanners to detect open ports and services.

Impact Analysis

An attacker could exploit this to read confidential data, potentially leading to data breaches, unauthorized access to business information, or further network compromise. The impact depends on the sensitivity of the exposed data.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations by exposing protected health information, personal data, or other sensitive details. Organizations may face legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply IBM-provided fixes for versions 6.2.0.6, 6.2.1.2, or 6.2.2.1 via Fix Central or IBM Entitled Registry. If immediate patching is not possible, restrict network access to vulnerable systems and monitor for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-3482. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart