{"api_version":"1","generated_at":"2026-07-24T20:58:55+00:00","cve":"CVE-2026-3482","urls":{"html":"https://cve.report/CVE-2026-3482","api":"https://cve.report/api/cve/CVE-2026-3482.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-3482","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-3482"},"summary":{"title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass","description":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request.","state":"PUBLISHED","assigner":"ibm","published_at":"2026-07-22 19:17:03","updated_at":"2026-07-23 14:17:12"},"problem_types":["CWE-639","CWE-639 CWE-639 Authorization bypass through User-Controlled key"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Secondary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7280657","name":"https://www.ibm.com/support/pages/node/7280657","refsource":"psirt@us.ibm.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3482","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3482","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"Sterling B2B Integrator","version":"affected 6.2.0.0 6.2.0.5_2 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Sterling B2B Integrator","version":"affected 6.2.1.0 6.2.1.1_2 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Sterling B2B Integrator","version":"affected 6.2.2.0 6.2.2.0_1 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Sterling File Gateway","version":"affected 6.2.0.0 6.2.0.5_2 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Sterling File Gateway","version":"affected 6.2.1.0 6.2.1.1_2 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Sterling File Gateway","version":"affected 6.2.2.0 6.2.2.0_1 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"ProductVersionAPARRemediation & FixIBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT49168     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49168     Apply B2Bi 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT49168    Apply B2Bi 6.2.2.1\n\n\n\n \n\n\n\nThe IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on  Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes . \n\n\n\nThe container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"3482","cve":"CVE-2026-3482","epss":"0.004830000","percentile":"0.387860000","score_date":"2026-07-23","updated_at":"2026-07-24 00:10:11"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-3482","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-07-23T13:58:37.428339Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-07-23T13:58:49.327Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Sterling B2B Integrator","vendor":"IBM","versions":[{"lessThanOrEqual":"6.2.0.5_2","status":"affected","version":"6.2.0.0","versionType":"semver"},{"lessThanOrEqual":"6.2.1.1_2","status":"affected","version":"6.2.1.0","versionType":"semver"},{"lessThanOrEqual":"6.2.2.0_1","status":"affected","version":"6.2.2.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Sterling File Gateway","vendor":"IBM","versions":[{"lessThanOrEqual":"6.2.0.5_2","status":"affected","version":"6.2.0.0","versionType":"semver"},{"lessThanOrEqual":"6.2.1.1_2","status":"affected","version":"6.2.1.0","versionType":"semver"},{"lessThanOrEqual":"6.2.2.0_1","status":"affected","version":"6.2.2.0","versionType":"semver"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.0.5_2","versionStartIncluding":"6.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.1.1_2","versionStartIncluding":"6.2.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.2.0_1","versionStartIncluding":"6.2.2.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.0.5_2","versionStartIncluding":"6.2.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.1.1_2","versionStartIncluding":"6.2.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2.2.0_1","versionStartIncluding":"6.2.2.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request."}],"value":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","description":"CWE-639 Authorization bypass through User-Controlled key","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-07-22T18:06:00.762Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7280657"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"
ProductVersionAPARRemediation & Fix
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT49168     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49168     Apply B2Bi 6.2.1.2, 6.2.2.1
IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT49168    Apply B2Bi 6.2.2.1

 

The IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on Fix Central. 

The container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry.


"}],"value":"ProductVersionAPARRemediation & FixIBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.0.0 - 6.2.0.5_2 IT49168     Apply B2Bi 6.2.0.6, 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.1.0 - 6.2.1.1_2 IT49168     Apply B2Bi 6.2.1.2, 6.2.2.1IBM Sterling B2B Integrator and IBM Sterling File Gateway6.2.2.0 - 6.2.2.0_1   IT49168    Apply B2Bi 6.2.2.1\n\n\n\n \n\n\n\nThe IIM versions of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available on  Fix Central http://www-933.ibm.com/support/fixcentral/swg/selectFixes . \n\n\n\nThe container version of 6.2.0.6, 6.2.1.2 and 6.2.2.1 are available in IBM Entitled Registry."}],"source":{"discovery":"UNKNOWN"},"title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass","x_generator":{"engine":"Vulnogram 1.0.4"}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2026-3482","datePublished":"2026-07-22T18:06:00.762Z","dateReserved":"2026-03-03T14:50:55.686Z","dateUpdated":"2026-07-23T13:58:49.327Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-07-22 19:17:03","lastModifiedDate":"2026-07-23 14:17:12","problem_types":["CWE-639","CWE-639 CWE-639 Authorization bypass through User-Controlled key"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-23T13:58:37.428339Z","id":"CVE-2026-3482","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"3482","Ordinal":"1","Title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway Author","CVE":"CVE-2026-3482","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"3482","Ordinal":"1","NoteData":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request.","Type":"Description","Title":"IBM Sterling B2B Integrator and IBM Sterling File Gateway Author"}]}}}