Local File Exposure in IBM Sterling Control Center by IBM
CVE-2023-43035

4MEDIUM

Key Information:

Vendor
IBM
Status
Sterling Control Center
Vendor
CVE Published:
10 April 2025

Summary

IBM Sterling Control Center versions 6.2.1, 6.3.1, and 6.4.0 are prone to a local file exposure vulnerability, which allows user-generated web pages to be incorrectly stored on the server. This flaw could enable unauthorized users to read these files, potentially exposing sensitive information and impacting the confidentiality of stored data. Organizations running the affected versions should assess their environment and apply necessary security measures to mitigate risks.

Affected Version(s)

Sterling Control Center 6.2.1, 6.3.1, 6.4.0

References

https://www.ibm.com/support/pages/node/7230561
vendor-advisory

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.