VULNERABILITY INTELLIGENCE

CVE-2023-43052

CVSS score5.3 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2025-03-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with.

Weakness classification

  • psirt@us.ibm.com: CWE-435
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-435

Primary references