IBM Sterling Control Center Sensitive Information Exposure Vulnerability

A vulnerability in IBM Sterling Control Center versions 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally and read by another user on the same system. This issue can lead to the unintentional sharing of sensitive information, such as session tokens, through URLs.

Impact

Exploitation of this vulnerability could result in the exposure of sensitive information, including session tokens, which could be intercepted and potentially misused by another user on the system.

Remediation

Users can upgrade to IBM Sterling Control Center 6.2.1.0 iFix15, 6.3.1.0 iFix04, or 6.4.0.0 iFix01. Instructions for downloading these versions are available on IBM Fix Central.