CVE-2026-3158 is an information disclosure vulnerability classified under CWE-615, affecting IBM Sterling B2B Integrator and IBM Sterling File Gateway in specified 6.2.x versions. Sensitive information is included in source code comments of a dashboard component, potentially exposing confidential data to unauthorized users. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity with network attack vector, low attack complexity, and requiring low privileges. No known exploits are reported, and no vendor-provided patch or official remediation level is documented at this time.

The vulnerability allows unauthorized disclosure of sensitive information embedded in source code comments, which could aid attackers in understanding the system or gaining further access. However, the impact is limited to confidentiality as there is no indication of integrity or availability compromise. The medium CVSS score reflects this limited impact and the requirement for some privileges to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor IBM's security advisories for updates. Until a patch is available, restrict access to affected components and review source code comments for sensitive information as a temporary measure.