IBM webMethods Hybrid Integration

 View Only

 WxConfig UI - File Access issue.

Satya Veerendra Alluri's profile image
Satya Veerendra Alluri posted Tue September 30, 2025 11:10 PM

During a recent security scan, it was discovered that files within the webMethods installation directory could be edited via the WxConfig UI page. As you know, WxConfig is primarily used to manage configuration files based on the environment, and it provides a UI to view and edit these files.

The concern is that the UI allows manipulation of file names through browser developer tools (e.g., using Inspect Element and tampering with the request URL), which could potentially expose the system to unauthorized access and modification of files within the installation directory.

Could anyone advise on how this behavior can be restricted or mitigated?

Attachments  View in library
image.png 617 KB
image.png 194 KB