Files
vuln-nvd/data/2025/CVE-2025-1348.json
T

2 lines
3.7 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:a:ibm:sterling_b2b_integrator:6.0.0.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:sterling_b2b_integrator:6.1.2.6:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.0.0:*:*:*:standard:*:*:*","cpe:2.3:a:ibm:sterling_b2b_integrator:6.2.0.4:*:*:*:standard:*:*:*"],"defaultStatus":"unaffected","product":"Sterling B2B Integrator","vendor":"IBM","versions":[{"lessThanOrEqual":"6.1.2.6","status":"affected","version":"6.0.0.0","versionType":"semver"},{"lessThanOrEqual":"6.2.0.4","status":"affected","version":"6.2.0.0","versionType":"semver"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*","matchCriteriaId":"27052CAD-AA89-4F84-A09B-8FB89E22DDFB","versionEndExcluding":"6.1.2.7","versionStartIncluding":"6.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_b2b_integrator:*:*:*:*:standard:*:*:*","matchCriteriaId":"BF1ED3C3-4AD9-4ACC-9D2C-106F565EB42D","versionEndExcluding":"6.2.0.5","versionStartIncluding":"6.2","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"17BF730A-111A-4C4B-AB17-816BA1BAB298","versionEndExcluding":"6.1.2.7","versionStartIncluding":"6.0.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sterling_file_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"94A1DFAD-FD8B-4BA3-AC05-645E53676463","versionEndExcluding":"6.2.0.5","versionStartIncluding":"6.2.0.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*","matchCriteriaId":"E492C463-D76E-49B7-A4D4-3B499E422D89","vulnerable":false},{"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy."},{"lang":"es","value":"IBM Sterling B2B Integrator e IBM Sterling File Gateway 6.0.0.0 a 6.1.2.6 y 6.2.0.0 a 6.2.0.4 podrían permitir que un usuario local obtenga información confidencial del caché del navegador web de un usuario debido a que no utilizan una política de almacenamiento en caché adecuada."}],"id":"CVE-2025-1348","lastModified":"2026-06-17T08:38:57.497","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4.0,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"exploitabilityScore":2.5,"impactScore":1.4,"source":"psirt@us.ibm.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1348","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-06-18T18:25:33.803335Z","version":"2.0.3"}}]},"published":"2025-06-18T17:15:28.360","references":[{"source":"psirt@us.ibm.com","tags":["Vendor Advisory"],"url":"https://www.ibm.com/support/pages/node/7237068"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-525"}],"source":"psirt@us.ibm.com","type":"Secondary"}]}