NVD

Id
44041  
Name
CVE-2012-2206  
Description
The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-17  
Modified Date
2012-08-17  
Seq
2012-2206  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221342 44041 CVE-2012-2206 IC82761  View
221343 44041 CVE-2012-2206 20478  View
221344 44041 CVE-2012-2206 http://www.ibm.com/support/docview.wss?uid=swg21607481  View
221345 44041 CVE-2012-2206 wmq-ftewg-security-bypass(77095)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28028 JVNDB-2012-003735 IBM WebSphere MQ File Transfer Edition における任意のユーザのファイルを読まれる脆弱性 IBM WebSphere MQ File Transfer Edition の Web Gateway コンポーネントには、任意のユーザのファイルを読まれる脆弱性が存在します。 CVE-2012-2206 55444 CVE-2012-2206 44041 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003735.html 2012-08-08 2012-08-21 View