CVE-2023-43040: IBM Spectrum Fusion HCI improper access control
First published: Thu Jun 22 2023(Updated: )
[Improperly verified POST keys]
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/ceph | <=12.2.11+dfsg1-2.1<=14.2.21-1<=16.2.11+ds-2 | 12.2.11+dfsg1-2.1+deb10u1 16.2.11+ds-5 18.2.1+ds-5 |
| ubuntu/ceph | <12.2.13-0ubuntu0.18.04.11+ | 12.2.13-0ubuntu0.18.04.11+ |
| ubuntu/ceph | <15.2.17-0ubuntu0.20.04.6 | 15.2.17-0ubuntu0.20.04.6 |
| ubuntu/ceph | <17.2.6-0ubuntu0.22.04.3 | 17.2.6-0ubuntu0.22.04.3 |
| ubuntu/ceph | <18.2.0-0ubuntu3.1 | 18.2.0-0ubuntu3.1 |
| ubuntu/ceph | <0.80.11-0ubuntu1.14.04.4+ | 0.80.11-0ubuntu1.14.04.4+ |
| ubuntu/ceph | <16.2.11+ | 16.2.11+ |
| ubuntu/ceph | <10.2.11-0ubuntu0.16.04.3+ | 10.2.11-0ubuntu0.16.04.3+ |
| IBM Storage Fusion HCI | <=2.5.2 - 2.7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2023:5693
- https://access.redhat.com/errata/RHSA-2024:0745
- https://bugzilla.redhat.com/show_bug.cgi?id=2216855
- https://www.openwall.com/lists/oss-security/2023/09/26/10
- https://tracker.ceph.com/issues/63004
- https://github.com/ceph/ceph/pull/53714
- https://github.com/ceph/ceph/commit/100d81aa060f061271499f1fa28dbdc06de443fd
- https://security-tracker.debian.org/tracker/CVE-2023-43040
- https://ubuntu.com/security/notices/USN-6613-1
- https://www.cve.org/CVERecord?id=CVE-2023-43040
- https://nvd.nist.gov/vuln/detail/CVE-2023-43040
- https://launchpad.net/bugs/cve/CVE-2023-43040
- https://ubuntu.com/security/CVE-2023-43040
- https://www.ibm.com/support/pages/node/7151040 (Advisory)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/266807
- collector/oss-sec
- alias/CVE-2023-43040
- agent/first-publish-date
- agent/remedy
- agent/type
- collector/redhat-bugzilla
- source/Red Hat
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- collector/usn-cve
- source/Ubuntu
- agent/title
- agent/weakness
- agent/references
- collector/ibm-support
- source/IBM
- agent/description
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- package-manager/debian
- package-manager/ubuntu
- vendor/ibm
- canonical/ibm storage fusion hci
- version/ibm storage fusion hci/2.5.2 - 2.7.2