Code injection

2012-08-1710:31:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.4%

JSON

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

CPENameOperatorVersion
websphere_mqeq7.0.1.0 file-transfer
websphere_mqeq7.0.2.0 file-transfer
websphere_mqeq7.0.2.2 file-transfer
websphere_mqeq7.0.4.0 file-transfer
websphere_mqeq7.0.0.1 file-transfer
websphere_mqeq7.0.4 file-transfer
websphere_mqeq7.0 file-transfer

Name	Operator	Version
websphere_mq	eq	7.0.1.0 file-transfer
websphere_mq	eq	7.0.2.0 file-transfer
websphere_mq	eq	7.0.2.2 file-transfer
websphere_mq	eq	7.0.4.0 file-transfer
websphere_mq	eq	7.0.0.1 file-transfer
websphere_mq	eq	7.0.4 file-transfer
websphere_mq	eq	7.0 file-transfer