VULNERABILITY INTELLIGENCE

CVE-2012-2206

CVSS score3.5 LOW
EPSS probability2.01%
CISA KEVNot currently listed
Published2012-08-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:N/A:N

Description

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

Primary references