CVE-2024-35114

Name of the Vulnerable Software and Affected Versions: IBM Control Center versions 6.2.1 through 6.3.1

Description: The issue is related to an observable discrepancy in responses to incoming requests, which could allow a remote attacker to enumerate usernames. This discrepancy may enable unauthorized access to protected information.

Recommendations: For versions 6.2.1 and 6.3.1, consider restricting access to the login functionality until a patch is available. As a temporary workaround, avoid using the login feature in the affected IBM Control Center versions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.