Description
IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Published: 2026-01-20
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Affected Product(s)Fixed in releaseInstructionsSterling Connect:Express Adapter for Sterling B2B Integrator 5.2.05.2.0.13 IBM Support: Fix Central - Select fixes https://www.ibm.com/support/fixcentral/swg/selectFixes https://www.ibm.com/support/fixcentral/swg/doSelectFixes

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 03 Feb 2026 22:00:00 +0000

Type Values Removed Values Added
First Time appeared Ibm sterling Connect\
CPEs cpe:2.3:a:ibm:sterling_connect\:express_adapter_for_sterling_b2b_integrator:*:*:*:*:*:*:*:*
Vendors & Products Ibm sterling Connect\

Tue, 20 Jan 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Jan 2026 15:45:00 +0000

Type Values Removed Values Added
Description IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Title Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
First Time appeared Ibm
Ibm sterling Connectexpress Adapter For Sterling B2b Integrator 520
Weaknesses CWE-384
CPEs cpe:2.3:a:ibm:sterling_connectexpress_adapter_for_sterling_b2b_integrator_520:5.2.0.00:*:*:*:*:*:*:*
cpe:2.3:a:ibm:sterling_connectexpress_adapter_for_sterling_b2b_integrator_520:5.2.0.12:*:*:*:*:*:*:*
Vendors & Products Ibm
Ibm sterling Connectexpress Adapter For Sterling B2b Integrator 520
References
Metrics cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

Ibm Sterling Connect\ Sterling Connectexpress Adapter For Sterling B2b Integrator 520
cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2026-01-20T15:51:47.539Z

Reserved: 2025-04-15T21:16:17.124Z

Link: CVE-2025-36115

cve-icon Vulnrichment

Updated: 2026-01-20T15:51:39.611Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-20T16:16:03.703

Modified: 2026-02-03T21:56:33.937

Link: CVE-2025-36115

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses