CVE-2023-43040

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
ibmCNA
6.5 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
CISA-ADPADP
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
Debian logo
Debian Releases
Debian Product
Codename
ceph
bullseye
no-dsa
bookworm
vulnerable
bookworm (security)
16.2.15+ds-0+deb12u1
fixed
sid
18.2.4+ds-11
fixed
trixie
18.2.4+ds-11
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ceph
oracular
Fixed 18.2.0-0ubuntu6
released
noble
Fixed 18.2.0-0ubuntu6
released
mantic
Fixed 18.2.0-0ubuntu3.1
released
lunar
ignored
jammy
Fixed 17.2.6-0ubuntu0.22.04.3
released
focal
Fixed 15.2.17-0ubuntu0.20.04.6
released
bionic
Fixed 12.2.13-0ubuntu0.18.04.11+esm1
released
xenial
Fixed 10.2.11-0ubuntu0.16.04.3+esm1
released
trusty
Fixed 0.80.11-0ubuntu1.14.04.4+esm2
released