PT-2012-3880

Name of the Vulnerable Software and Affected Versions IBM WebSphere MQ File Transfer Edition versions 7.0.4 and earlier Description The issue allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI. This can be demonstrated by modifying the...

CVE-2012-2206: Undefined Security Weakness

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI...