IBM WebSphere MQ File Transfer Edition Bug Lets Remote Authenticated Users Access Other File Transfers

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1027372

SecurityTracker URL: http://securitytracker.com/id/1027372

CVE Reference: CVE-2012-2206 (Links to External Site)

Date: Aug 13 2012

Impact: Disclosure of user information

Fix Available: Yes Vendor Confirmed: Yes

Version(s): 7.0.4 and prior versions

Description: A vulnerability was reported in IBM WebSphere MQ File Transfer Edition. A remote authenticated user can access another user's transferred files.

A remote authenticated user with knowledge of the target filename can access another user's transferred file.

Impact: A remote authenticated user can access another user's transferred files.

Solution: The vendor has issued a fix (APAR IC82761 for 7.0.4).

The vendor's advisory is available at:

http://www-01.ibm.com/support/docview.wss?uid=swg21607481

Vendor URL: www-01.ibm.com/support/docview.wss?uid=swg21607481 (Links to External Site)

Cause: Access control error

Underlying OS: Linux (Any), UNIX (AIX), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (Any), z/OS

Message History: None.

Date: Mon, 13 Aug 2012 16:40:24 +0000
Subject: IBM WebSphere MQ


http://www-01.ibm.com/support/docview.wss?uid=swg21607481

CVE-2012-2206