CVE-2023-43052
Last modified
CVE-2023-43052 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
IBM Control Center 6.2.1 through 6.3.1 is vulnerable to an external service interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to induce the application to perform server-side DNS lookups or HTTP requests to arbitrary domain names. By submitting suitable payloads, an attacker can cause the application server to attack other systems that it can interact with.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Control Center | 6.2.1.0 |
| Ibm | Control Center | 6.3.1.0 |
References
- https://www.ibm.com/support/pages/node/7185102Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-43052?
How severe is CVE-2023-43052?
How do I fix CVE-2023-43052?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-43041IBM QRadar SIEM 7.5 is vulnerable to information exposure al…4.9
- CVE-2023-43042IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and…7.5
- CVE-2023-43043IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 an…5.5
- CVE-2023-43044IBM License Metric Tool 9.2 could allow a remote attacker to…7.5
- CVE-2023-43045IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.…7.5
- CVE-2023-43051IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerabl…5.4
- CVE-2023-43054IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerabl…5.4
- CVE-2023-43057IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting.…5.4
- CVE-2023-43058IBM Robotic Process Automation 23.0.9 is vulnerable to privi…9.8
- CVE-2023-43064Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could all…7.8
- CVE-2023-43065 Dell Unity prior to 5.3 contains a Cross-site scripting vul…5.4
- CVE-2023-43066 Dell Unity prior to 5.3 contains a Restricted Shell Bypass …7.8
Are you affected by CVE-2023-43052?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST