IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.1_2 and 6.2.2.0 through 6.2.2.0_1 contain an improper access control vulnerability (CWE-284). This flaw permits an authenticated user with limited privileges to obtain sensitive information that should be restricted to privileged users only. The vulnerability does not impact system integrity or availability but compromises confidentiality to a limited extent. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, and low confidentiality impact.

An authenticated user with limited privileges can access sensitive information that should be restricted to privileged users. This could lead to unauthorized disclosure of confidential data. There is no indication of impact on system integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users and monitor for unusual access patterns. Follow IBM's official security advisories for updates on patches or mitigations.