Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-35112 EUVD-2024-35545GHSA-2cwp-85p5-6fwc

IBM Control Center cross-site scripting

Published Jan 25, 2025 · Updated Jan 27, 2025 · Assigned by ibm

Description

IBM Control Center 6.2.1 and 6.3.1

could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Affected products

VendorProductAffectedFixed
IBM Control Center 6.2.1, 6.3.1 —

References