Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2012-2206

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

  • Published: Aug 17, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-2206
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
ibm / websphere_mq 7.0.1.0 7.0.1.0.x
ibm / websphere_mq 7.0.2.0 7.0.2.0.x
ibm / websphere_mq 7.0.2.2 7.0.2.2.x
ibm / websphere_mq 7.0.4.0 7.0.4.0.x
ibm / websphere_mq 7.0.0.1 7.0.0.1.x
ibm / websphere_mq 7.0.4 7.0.4.x
ibm / websphere_mq 7.0 7.0.x