Name: CVE-2023-43040: Insufficient Granularity of Access Control
Creator: Rapid7
Published: 2024-05-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-43040, CVSS 6.5, EPSS 0.1017

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade ceph-common-debuginfoUpgrade librados2-develUpgrade python-radosUpgrade ceph-commonUpgrade librbd1Upgrade librados2Upgrade librbd1-develUpgrade python-rbd	Oct 23, 2023	Oct 23, 2023
Centos_linux	—	Upgrade cephadmUpgrade ceph-osd-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-ceph-argparseUpgrade python3-cephfs-debuginfoUpgrade librgw2Upgrade ceph-radosgw-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-debugsourceUpgrade ceph-mon-debuginfoUpgrade libradospp-develUpgrade ceph-fuseUpgrade python3-rbdUpgrade cephfs-topUpgrade ceph-baseUpgrade python3-cephfsUpgrade ceph-exporter-debuginfoUpgrade python3-rgwUpgrade python3-rgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade rbd-nbdUpgrade ceph-resource-agentsUpgrade ceph-mgr-debuginfoUpgrade cephadm-ansibleUpgrade ceph-selinuxUpgrade librbd-develUpgrade ceph-mibUpgrade ceph-test-debuginfoUpgrade libradosstriper1Upgrade ceph-mds-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-radosUpgrade rbd-nbd-debuginfoUpgrade libcephfs2Upgrade librados-develUpgrade libcephsqlite-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-rados-debuginfoUpgrade librgw-develUpgrade libcephfs2-debuginfoUpgrade ceph-commonUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-immutable-object-cacheUpgrade libcephfs-develUpgrade python3-ceph-commonUpgrade librgw2-debuginfoUpgrade ceph-immutable-object-cache-debuginfo	Nov 1, 2023	Oct 12, 2023
Debian	—	Upgrade ceph	Oct 25, 2023	Oct 25, 2023
Redhat_linux	—	Upgrade ceph-debugsourceUpgrade python3-cephfsUpgrade ceph-baseUpgrade ceph-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-selinuxUpgrade python3-radosUpgrade librgw-develUpgrade librados-develUpgrade python3-rados-debuginfoUpgrade ceph-fuse-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-mibUpgrade librgw2-debuginfoUpgrade libcephfs-develUpgrade librgw2Upgrade rbd-nbdUpgrade libcephsqlite-debuginfoUpgrade libradospp-develUpgrade rbd-nbd-debuginfoUpgrade python3-rbdUpgrade libcephfs2Upgrade ceph-resource-agentsUpgrade ceph-commonUpgrade python3-rgwUpgrade rbd-fuse-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-exporter-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-rbd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-osd-debuginfoUpgrade librbd-develUpgrade cephadmUpgrade rbd-mirror-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade libradosstriper1Upgrade ceph-base-debuginfoUpgrade ceph-fuseUpgrade librados-devel-debuginfoUpgrade ceph-immutable-object-cacheUpgrade ceph-mds-debuginfoUpgrade ceph-mgr-debuginfoUpgrade cephfs-topUpgrade libcephfs2-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-ceph-commonUpgrade cephadm-ansible	Nov 1, 2023	Oct 12, 2023
Ubuntu	—	Upgrade ceph-common (Ubuntu Pro)Upgrade ceph-commonUpgrade ceph-base (Ubuntu Pro)Upgrade ceph (Ubuntu Pro)Upgrade cephUpgrade ceph-base	Jan 30, 2024	Jan 29, 2024

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence