CVE-2012-2206: IBM WebSphere Mq

Low severity, CVSS 3.5. EPSS: 2% chance of exploitation in the next 30 days.

The Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier allows remote authenticated users to read files of arbitrary users via vectors involving a username in a URI, as demonstrated by a modified metadata=fteSamplesUser field to the /transfer URI.

Affected products

• IBM WebSphere Mq: version 7.0 only; version 7.0.0.1 only; version 7.0.1.0 only; version 7.0.2.0 only; version 7.0.2.2 only; version 7.0.4 only; …

Published 2012-08-17. Last modified 2026-06-16.