CVE-2023-35020: IBM Sterling Control Center directory traversal
IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 257874.
Other sources
IBM Sterling Control Center could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35020?
CVE-2023-35020 is classified as a security vulnerability that allows remote attackers to access arbitrary files on the system.
How do I fix CVE-2023-35020?
To fix CVE-2023-35020, apply the patch provided by IBM for Sterling Control Center version 6.3.0.
What could an attacker do with CVE-2023-35020?
An attacker could exploit CVE-2023-35020 to traverse directories and potentially access sensitive files on the system.
Which version of IBM Sterling Control Center is affected by CVE-2023-35020?
CVE-2023-35020 affects IBM Sterling Control Center version 6.3.0.
Is CVE-2023-35020 limited to IBM operating systems?
No, CVE-2023-35020 specifically affects IBM Sterling Control Center and is not limited to a particular operating system.