Design/Logic Flaw

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

CVE-2023-35020

CVE-2023-35020 affects IBM Sterling Control Center 6.3.0. The vulnerability enables a remote attacker to traverse directories by sending URL requests containing "/.." sequences, allowing viewing of arbitrary system files. The primary impact is potential unintended disclosure of files with a Low c...