Medium severity6.5NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2023-43040

Description

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Spectrum Fusion HCIllm-create
Range: 2.5.2 - 2.7.2
IBM/Fusion HCIcpe-rescue
Range: 2.5.2
IBM/Storage Fusion Hci
cpe:2.3:a:ibm:storage_fusion_hci:*:*:*:*:*:*:*:*
Range: >=2.5.2,<2.8.0

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/266807nvdVendor Advisory
www.ibm.com/support/pages/node/7151040nvdVendor Advisory
lists.debian.org/debian-lts-announce/2023/10/msg00034.htmlnvd
lists.debian.org/debian-lts-announce/2025/09/msg00025.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000