CVE-2023-43052

IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with.

Score
CVSS 3.1 5.3 Medium
Status
Analyzed - psirt@us.ibm.com
Published
2025-03-07
Last modified
2025-08-16
Weaknesses
CWE-435

Affected products

References

 
 
© AVABIS GmbH privacypolicy about