*Exploit Author:* Nir Valtman *Description:* Malicious user is able to add userspace, change permissions on existing userspace and add MQMD (MQ Message Descriptor) user IDs. All of the these vulnerabilities can be exploited using a CSRF (Cross Site Request Forgery) attack. Few days ago the CVE has been published here * * *Affected Platforms: *Version 7.0.4 and all previous versions of WebSphere MQ File Transfer Editionrunning on all platforms are affected. * * * * *Exploit Details:* *1. CSRF To add user and define his quota on a userspace* I created the following HTML page and then opened it by a logged-on user: See the following screenshot, which follows the execution of CSRF attack: [image: Inline image 1] *2. CSRF to add permissions on file spaces:* I created the following HTML page and then opened it by a logged-on user: See the following screenshot, which follows the execution of CSRF attack: [image: Inline image 2] *2. CSRF to add MQMD user id:* I created the following HTML page and then opened it by a logged-on user: See the following screenshot, which follows the execution of CSRF attack: [image: Inline image 3] Best Regards, Nir Valtman