IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to an improper access control flaw (CWE-306). The vulnerability allows a remote unauthenticated attacker to view the partners of a community and delete the partners and the community itself, leading to confidentiality loss, integrity compromise, and potential disruption of business processes.

Affected products are IBM Sterling B2B Integrator and IBM Sterling File Gateway. Specific vulnerable versions include 6.1.0.0‑6.1.2.7_2, 6.2.0.0‑6.2.0.5_1, 6.2.1.0‑6.2.1.1_1, and 6.2.2.0, as identified in the vendor's product CPE entries.

The CVSS score is 7.1 (High) and the EPSS score is <1%, indicating a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires only remote network access and does not require authentication, making it relatively straightforward for an attacker who can reach the affected system to modify or delete critical partner data.