CVE-2023-43040 – IBM Spectrum Fusion HCI improper access control

https://notcve.org/view.php?id=CVE-2023-43040

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807. IBM Spectrum Fusion HCI 2.5.2 a 2.7.2 podría permitir que un atacante realice acciones no autorizadas en RGW para Ceph debido a un acceso inadecuado al depósito. ID de IBM X-Force: 266807. A flaw was found in rgw. • https://github.com/riza/CVE-2023-43040 https://exchange.xforce.ibmcloud.com/vulnerabilities/266807 https://www.ibm.com/support/pages/node/7151040 https://access.redhat.com/security/cve/CVE-2023-43040 https://bugzilla.redhat.com/show_bug.cgi?id=2216855 • CWE-1220: Insufficient Granularity of Access Control •