CVE-2017-1544: IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) caches usernam...

Security readout for executives and security teams

This is a low-severity credential exposure issue in IBM Sterling File Gateway 2.2.0 through 2.2.6. The product may allow browsers to cache usernames and passwords, letting someone with local access to the user’s browser profile recover sensitive credentials. The main business risk is credential misuse from shared, unmanaged, or compromised workstations. Exposure is most likely where affected Sterling File Gateway versions are accessed from shared browsers, kiosk-like systems, administrator workstations, or endpoints without strong local access controls. Internet exposure alone is not the key driver; the cited vector requires local physical access to the browser environment. Handle through normal vulnerability management, prioritizing environments with shared workstations or privileged gateway accounts. This is not described as remotely exploitable or actively exploited, but cached credentials can still create meaningful business impact if they enable unauthorized file-transfer access. Mitigation focus: Review IBM support guidance for the official fix or configuration remediation.; Identify and retire affected Sterling File Gateway 2.2.0 through 2.2.6 deployments.; Restrict local access to workstations used for Sterling File Gateway administration..

Prepared

Jun 1, 2026, 15:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.