Debian/ceph: critical 9.8
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
Action: Upgrade ceph to 16.2.11+ds-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 16.2.11+ds-5 | - |
Fixed versions
| 16.2.11+ds-5 |
Sources
- osv: DEBIAN-CVE-2023-43040#Debian:14/ceph
- https://security-tracker.debian.org/tracker/CVE-2023-43040
published · modified · JSON