Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-35114 EUVD-2024-35546GHSA-466p-j3vq-mwq3

IBM Control Center information disclosure

Published Jan 25, 2025 · Updated Jan 27, 2025 · Assigned by ibm

Description

IBM Control Center 6.2.1 and 6.3.1

could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.

Affected products

VendorProductAffectedFixed
IBM Control Center 6.2.1, 6.3.1 —

References