CVE-2023-43040

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 6.5

CVSS3: 9.8

EPSS Средний

Описание

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
Vendor Advisory
https://www.ibm.com/support/pages/node/7151040
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html
https://www.ibm.com/support/pages/node/7151040
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:storage_fusion_hci:*:*:*:*:*:*:*:*

Версия от 2.5.2 (включая) до 2.8.0 (исключая)

EPSS

Процентиль: 93%

0.1017

Средний

6.5 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-1220

Связанные уязвимости

CVE-2023-43040

CVSS3: 6.5

ubuntu

больше 1 года назад

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

CVE-2023-43040

CVSS3: 6.3

redhat

больше 2 лет назад

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

CVE-2023-43040

CVSS3: 6.5

msrc

больше 1 года назад

IBM Spectrum Fusion HCI improper access control

CVE-2023-43040

CVSS3: 6.5

debian

больше 1 года назад

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to ...

GHSA-fwhj-j6cr-5qw4

CVSS3: 6.5

github

больше 1 года назад

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

EPSS

Процентиль: 93%

0.1017

Средний

6.5 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-1220