IBM Sterling Control Center directory traversal

CVE-2023-35020

What is CVE-2023-35020?

IBM Sterling Control Center version 6.3.0 is susceptible to a directory traversal vulnerability, which enables remote attackers to manipulate URL requests by including 'dot dot' sequences. This exploitation could lead to unauthorized access to sensitive files within the system. Attackers sending specially crafted URL requests may gain visibility into arbitrary files, highlighting a significant security risk. Proper mitigation measures should be implemented to secure the affected systems against potential attacks. For further information, visit IBM's advisory page linked below.

References