CVE-2023-43040: IBM Storage Fusion Hci

Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days.

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Affected products

• IBM Storage Fusion Hci: from 2.5.2, before 2.8.0 (fixed in 2.8.0)

Published 2024-05-14. Last modified 2026-06-17.