Skip to content
Sign in
5.4 Medium

CVE-2024-35112 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed…

Description

IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected products and versions

Product Affected versions Fixed in
Control Center Versions not published

Other CVEs of Control Center

The 9 CVEs of Control Center →
CVE-2023-43052 IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper… 5.3 Medium CVE-2023-35894 IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by… 5.4 Medium CVE-2024-35114 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable… 5.3 Medium CVE-2024-35113 IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through… 4.3 Medium
Track this CVE