CVE-2023-35020

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

Security Bulletin: IBM Sterling Control Center is vulnerable to directory traversal (CVE-2023-35020)

Summary IBM Sterling Control Center is vulnerable to unauthorized directory traversal. Vulnerability Details CVEID:CVE-2023-35020 DESCRIPTION: IBM Sterling Control Center could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request...

CVE-2023-35020

CVE-2023-35020 affects IBM Sterling Control Center 6.3.0. The vulnerability enables a remote attacker to traverse directories by sending URL requests containing "/.." sequences, allowing viewing of arbitrary system files. The primary impact is potential unintended disclosure of files with a Low c...