IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 allow a remote authenticated attacker to access sensitive information because the applications record credentials and other secret data without proper sanitization. The vulnerability is a classic instance of logging sensitive information, identified as CWE-532, and can lead to disclosure of passwords, tokens, or other secrets that might be used by an attacker to compromise accounts or perform further attacks. The impact is the unauthorized exposure of confidential information rather than denial of service or code execution.

IBM Sterling B2B Integrator versions 6.2.1.0, 6.2.1.1, 6.2.1.2, 6.2.2.0, 6.2.2.1 and IBM Sterling File Gateway versions 6.2.1.0, 6.2.1.1, 6.2.1.2, 6.2.2.0, 6.2.2.1. These apply to the Standard Edition and are relevant for both traditional installations and containerized deployments, for which updated images (cp.icr.io/cp/ibm-b2bi and cp.icr.io/cp/ibm-sfg) are available.

The CVSS score of 4.9 classifies the issue as moderate severity. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The attack requires remote authenticated access and depends on the ability to trigger detailed logging of credentials, which implies that users with normal operational privileges could expose their own or other users' secrets if they log in and generate normal activity. As such, the risk is primarily the accidental leakage of sensitive data rather than a destructive exploit. Immediate remediation is recommended to prevent accidental disclosure.