Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j848-h89c-pqhf

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

EPSS

Процентиль: 92%
0.07716
Низкий

Связанные уязвимости

nvd
больше 13 лет назад

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

EPSS

Процентиль: 92%
0.07716
Низкий