CVE-2012-3294 Cross-site request forgery in n/a
CSRF vulnerabilities in IBM WebSphere MQ allow attackers to hijack user sessions to add accounts or modify permissions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2012-3294?
CVE-2012-3294 is a medium-severity vulnerability in Ibm Websphere Mq, published on 17 Aug 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Web Gateway component in IBM WebSphere MQ File Transfer Edition 7.0.4 and earlier, and WebSphere MQ - Managed File Transfer 7.5, allow remote attackers to hijack the authentication of arbitrary users for requests that (1) add user accounts via the /wmqfteconsole/Filespaces URI, (2) modify permissions via the /wmqfteconsole/FileSpacePermisssions URI, or (3) add MQ Message Descriptor (MQMD) user accounts via the /wmqfteconsole/UploadUsers URI.
Weakness: CWE-352
Which versions are affected by CVE-2012-3294?
It affects 2 products.
Products include Ibm Websphere Mq, Ibm Websphere Mq Managed File Transfer.
How do I fix CVE-2012-3294?
No fix has been published for CVE-2012-3294 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-3294 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-3294 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Ibm Websphere Mq
Sources
Also known as GHSA-wccq-42q9-qggj.