Skip to content
Sign in
5.4 Medium

CVE-2023-35894 IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by…

Description

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.

Affected products and versions

Product Affected versions Fixed in
Control Center 6.2 6.2.1 → 6.3.1 No fix stated

Other CVEs of Control Center

The 9 CVEs of Control Center →
CVE-2023-43052 IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper… 5.3 Medium CVE-2024-35114 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable… 5.3 Medium CVE-2024-35113 IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through… 4.3 Medium CVE-2024-35112 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed… 5.4 Medium
Track this CVE