CVE-2023-43035 IBM Sterling Control Center information disclosure

What is CVE-2023-43035?

CVE-2023-43035 is a medium-severity vulnerability in IBM Sterling Control Center, published on 10 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system.

Weakness: CWE-525

Which versions are affected by CVE-2023-43035?

It affects 1 product.

Products include Ibm Sterling Control Center.

How do I fix CVE-2023-43035?

No fix has been published for CVE-2023-43035 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-43035 being exploited?

There is no known exploitation of CVE-2023-43035 in the wild and no public exploit code.

Other vulnerabilities in IBM Sterling Control Center

• CVE-2013-2968 Denial of service in n/a Medium 6.3
• CVE-2023-42007 IBM Sterling Control Center cross-site scripting Medium 5.4
• CVE-2023-35894 IBM Control Center HOST header injection Medium 5.4
• CVE-2023-35020 IBM Sterling Control Center directory traversal Medium 5.4
• CVE-2014-0925 Open redirect in n/a Low 3.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9mhg-763p-r87w.