CVE-2023-43040 — IBM Spectrum Fusion HCI improper access control

CVE-2023-43040

IBM Spectrum Fusion HCI improper access control PUBLISHED

Description (CNA)

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Affected (CNA)

Vendor / product	Versions
IBM / Spectrum Fusion HCI	affected 2.5.2 through 2.7.2

CWE

CWE-1220

References

https://www.ibm.com/support/pages/node/7151040
https://exchange.xforce.ibmcloud.com/vulnerabilities/266807

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.ibm.com/support/pages/node/7151040
https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html