CVE-2023-43040

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-43040
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-43040.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-43040
Related
Published
2024-05-14T13:46:23Z
Modified
2024-09-18T03:25:25.576256Z
Summary
[none]
Details

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

References

Affected packages

Debian:11 / ceph

Package

Name
ceph
Purl
pkg:deb/debian/ceph?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

14.*

14.2.21-1
14.2.21-1.1

16.*

16.2.6+ds-1
16.2.6+ds-2
16.2.6+ds-3
16.2.6+ds-4
16.2.6+ds-5
16.2.6+ds-6
16.2.6+ds-7
16.2.6+ds-8
16.2.6+ds-9
16.2.6+ds-10
16.2.6+ds-11
16.2.7+ds-1
16.2.7+ds-2
16.2.7+ds-3
16.2.7+ds-4
16.2.7+ds-5
16.2.9+ds-1
16.2.10+ds-1
16.2.10+ds-2
16.2.10+ds-3
16.2.10+ds-4
16.2.10+ds-5
16.2.11+ds-1
16.2.11+ds-2
16.2.11+ds-3
16.2.11+ds-4
16.2.11+ds-5
16.2.11+ds-5.1

18.*

18.2.0+ds-1
18.2.0+ds-2
18.2.0+ds-3
18.2.0+ds-4
18.2.0+ds-5
18.2.0+ds-6
18.2.0+ds-7
18.2.0+ds-8
18.2.1+ds-1
18.2.1+ds-2
18.2.1+ds-3
18.2.1+ds-4
18.2.1+ds-5
18.2.1+ds-6
18.2.1+ds-7
18.2.1+ds-8
18.2.1+ds-9
18.2.3+ds-1
18.2.3+ds-2
18.2.3+ds-3
18.2.3+ds-3+loong64
18.2.4+ds-1
18.2.4+ds-2
18.2.4+ds-3
18.2.4+ds-4
18.2.4+ds-5
18.2.4+ds-6

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / ceph

Package

Name
ceph
Purl
pkg:deb/debian/ceph?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

16.*

16.2.11+ds-2
16.2.11+ds-3
16.2.11+ds-4
16.2.11+ds-5
16.2.11+ds-5.1

18.*

18.2.0+ds-1
18.2.0+ds-2
18.2.0+ds-3
18.2.0+ds-4
18.2.0+ds-5
18.2.0+ds-6
18.2.0+ds-7
18.2.0+ds-8
18.2.1+ds-1
18.2.1+ds-2
18.2.1+ds-3
18.2.1+ds-4
18.2.1+ds-5
18.2.1+ds-6
18.2.1+ds-7
18.2.1+ds-8
18.2.1+ds-9
18.2.3+ds-1
18.2.3+ds-2
18.2.3+ds-3
18.2.3+ds-3+loong64
18.2.4+ds-1
18.2.4+ds-2
18.2.4+ds-3
18.2.4+ds-4
18.2.4+ds-5
18.2.4+ds-6

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / ceph

Package

Name
ceph
Purl
pkg:deb/debian/ceph?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
16.2.11+ds-5

Affected versions

16.*

16.2.11+ds-2
16.2.11+ds-3
16.2.11+ds-4

Ecosystem specific 

{
    "urgency": "not yet assigned"
}