CVE-2024-35111: IBM Control Center information disclosure
IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Other sources
IBM Sterling Control Center could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35111?
The severity of CVE-2024-35111 is rated as medium due to the potential exposure of sensitive information.
How do I fix CVE-2024-35111?
To fix CVE-2024-35111, you should apply the relevant patches provided by IBM for Control Center versions 6.2.1 and 6.3.1.
What types of information could be exposed by CVE-2024-35111?
CVE-2024-35111 could expose detailed technical error messages that may include sensitive system information.
Who is affected by CVE-2024-35111?
CVE-2024-35111 affects users of IBM Control Center versions 6.2.1 and 6.3.1.
What are the potential consequences of exploiting CVE-2024-35111?
Exploiting CVE-2024-35111 could lead to further attacks against the system by leveraging the sensitive information disclosed.