Security Bulletin: IBM WebSphere MQ File Transfer Edition Web Gateway vulnerable to CSRF attack (CVE-2012-3294)

Abstract A low risk security vulnerability in the "Web Gateway" component of IBM WebSphere MQ File Transfer Edition and WebSphere MQ - Managed File Transfer may be susceptible to a Cross Site Request Forgery attack. Content CVE ID: CVE-2012-3294 DESCRIPTION: When using the web gateway, an...

CVE-2012-3294

The CVE-2012-3294 entry affects IBM WebSphere MQ File Transfer Edition (Web Gateway) and WebSphere MQ - Managed File Transfer. The IBM Security Bulletin confirms CSRF vulnerabilities in the Web Gateway that could allow an authenticated user to perform actions (add user accounts, modify permission...