Aller au contenu
Se connecter
5.4 Moyenne

CVE-2023-35020 IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system

Description

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 257874.

Produits et versions touchés

Produit Versions touchées Corrigé en
Sterling Control Center 6.3.0 Pas de correctif indiqué
sterling_control_center 6.3.0 Pas de correctif indiqué

Autres CVE de Sterling Control Center

Les 3 CVE de Sterling Control Center →
CVE-2023-43035 IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another… 4.0 Moyenne CVE-2023-42007 IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting 5.4 Moyenne
Suivre cette CVE