IBM WebSphere MQ 'Web Gateway' Component Multiple Security Vulnerabilities

Bugtraq ID:	54983
Class:	Design Error
CVE:	CVE-2012-3294 CVE-2012-2206
Remote:	Yes
Local:	No
Published:	Aug 10 2012 12:00AM
Updated:	Aug 10 2012 12:00AM
Credit:	Nir Valtman
Vulnerable:	IBM WebSphere MQ File Transfer Edition 7.0.4 IBM WebSphere MQ File Transfer Edition 7.0.3
Not Vulnerable:

IBM WebSphere MQ 'Web Gateway' Component Multiple Security Vulnerabilities

IBM WebSphere MQ File Transfer Edition is prone to the following security vulnerabilities:

1. A cross-site request-forgery vulnerability.

2. A security-bypass vulnerability.

Exploiting these issues may allow a remote attacker to perform certain administrative actions, bypass certain security restrictions, or perform unauthorized actions in the context of a user's session. Other attacks are also possible.

IBM WebSphere MQ 'Web Gateway' Component Multiple Security Vulnerabilities

An attacker can exploit these issues through a browser. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into following a malicious URI.

The following example code is available:

• /data/vulnerabilities/exploits/54983.txt

IBM WebSphere MQ 'Web Gateway' Component Multiple Security Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

IBM WebSphere MQ 'Web Gateway' Component Multiple Security Vulnerabilities

References:

• WebSphere MQ File Transfer Edition Homepage (IBM)
  
• Security Bulletin: IBM WebSphere MQ File Transfer Edition Web Gateway insufficie (IBM)
  
• Security Bulletin: IBM WebSphere MQ File Transfer Edition Web Gateway vulnerable (IBM)