Information Disclosure Vulnerability in IBM Control Center
CVE-2024-35111

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Control Center
Vendor
CVE Published:
25 January 2025

Summary

An information disclosure vulnerability exists in IBM Control Center versions 6.2.1 and 6.3.1 that could allow a remote attacker to gain access to sensitive information. This occurs when the application returns detailed technical error messages in the browser, which may inadvertently expose data that can aid in subsequent attacks against the system. It's crucial for users to assess their current versions and apply necessary security measures to mitigate potential risks.

Affected Version(s)

Control Center 6.2.1, 6.3.1

References

https://www.ibm.com/support/pages/node/7174806
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.