CVE-2023-43040

—

CVSS 3.1

9.8 critical

EPSS

3%p84

Published

May 14, 2024 (May 14, 2024)

Modified

Jun 17, 2026

Description

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Vendors: ibm
Products: storage fusion hci
Weakness: CWE-1220
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.