6.5
Medium
CVE-2023-43040 IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph…
Description
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Fusion HCI 2.5 | 2.5.2 → 2.7.2 | No fix stated |
| spectrum_fusion_hci | 2.5.2 | No fix stated |