medium6.5
CVE-2023-43040
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.
Impact
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Storage Fusion Hci | from 2.5.2 before 2.8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
- https://www.ibm.com/support/pages/node/7151040
- https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
- https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
- https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html
- https://www.ibm.com/support/pages/node/7151040