CVE-2012-2206

Published: Aug 17, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

Affected (7)

Products: Ibm: Websphere Mq

Ibm

1 product

Websphere Mq

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Mq	Version 7.0.0.1
Ibm Websphere Mq	Version 7.0.1.0
Ibm Websphere Mq	Version 7.0.2.0
Ibm Websphere Mq	Version 7.0.2.2
Ibm Websphere Mq	Version 7.0.4.0
Ibm Websphere Mq	Version 7.0.4
Ibm Websphere Mq	Version 7.0