CVE-2024-35114

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35114

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

I

BM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.

References
Link Resource
https://www.ibm.com/support/pages/node/7174842 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:control_center:6.2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:control_center:6.3.1.0:*:*:*:*:*:*:*
History

06 Nov 2025, 22:01

Type Values Removed Values Added
First Time Ibm control Center
Ibm
CPE cpe:2.3:a:ibm:control_center:6.2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:control_center:6.3.1.0:*:*:*:*:*:*:*
References () https://www.ibm.com/support/pages/node/7174842 - () https://www.ibm.com/support/pages/node/7174842 - Vendor Advisory
CWE CWE-203
Summary
  • (es) IBM Control Center 6.2.1 y 6.3.1 podrían permitir que un atacante remoto enumere nombres de usuario debido a una discrepancia observable entre los intentos de inicio de sesión.

25 Jan 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-25 14:15

Updated : 2025-11-06 22:01

NVD link : CVE-2024-35114

Mitre link : CVE-2024-35114

CVE.ORG link : CVE-2024-35114

JSON object : View

Products Affected

ibm

CWE
CWE-204

Observable Response Discrepancy

CWE-203

Observable Discrepancy