CVE-2012-3294: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests that 1 add user...

PT-2012-3880

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ File Transfer Edition versions 7.0.4 and earlier Description The issue allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI. This can be demonstrated by modifying the...

PT-2012-4630

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ File Transfer Edition versions 7.0.4 and earlier IBM WebSphere MQ - Managed File Transfer version 7.5 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests. This can be done...

CVE-2012-2206: Undefined Security Weakness

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...