Skip to content
Sign in
5.4 Medium

CVE-2023-35020 IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system

Description

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 257874.

Affected products and versions

Product Affected versions Fixed in
Sterling Control Center 6.3.0 No fix stated
sterling_control_center 6.3.0 No fix stated

Other CVEs of Sterling Control Center

The 3 CVEs of Sterling Control Center →
CVE-2023-43035 IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another… 4.0 Medium CVE-2023-42007 IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting 5.4 Medium
Track this CVE