CVE-2026-1264

IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls

Assigner: ibm
Reserved: 20.01.2026 Published: 17.03.2026 Updated: 17.03.2026

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS Score: 7.1

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	High
User Interaction	None	Availability Impact	None

CVSS 3.1

Product Status

Vendor	IBM
Product	Sterling B2B Integrator
Versions	affected from 6.1.0.0 to 6.1.2.7_2 (incl.) affected from 6.2.0.0 to 6.2.0.5_1 (incl.) affected from 6.2.1.0 to 6.2.1.1_1 (incl.) Version 6.2.2.0 is affected

Vendor

IBM

Product

Sterling B2B Integrator

Versions

affected from 6.1.0.0 to 6.1.2.7_2 (incl.)
affected from 6.2.0.0 to 6.2.0.5_1 (incl.)
affected from 6.2.1.0 to 6.2.1.1_1 (incl.)
Version 6.2.2.0 is affected

Solutions

Remediation/Fixes Product Version APAR Remediation & Fix IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 - 6.1.2.7_2 IT48934 Apply B2Bi 6.1.2.8, 6.2.0.5_2, 6.2.1.1_2 or 6.2.2.0_1 IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 - 6.2.0.5_1 IT48934 Apply B2Bi 6.2.0.5_2, 6.2.1.1_2 or 6.2.2.0_1 IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.1.0 - 6.2.1.1_1 IT48934 Apply B2Bi 6.2.1.1_2 or 6.2.2.0_1 IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.2.0 IT48934 Apply B2Bi 6.2.2.0_1 The IIM versions of 6.1.2.8, 6.2.0.5_2, 6.2.1.1_2 and 6.2.2.0_1 are available on Fix Central . The container version of 6.1.2.8, 6.2.0.5_2, 6.2.1.1_2 and 6.2.2.0_1 are available in IBM Entitled Registry.

References

Problem Types