CVE-2023-43040

Summary: CVE-2023-43040 affects IBM Spectrum Fusion HCI (Ceph RGW) and Ceph RGW in IBM Storage Ceph, with versions 2.5.2–2.7.2 vulnerable to unauthorized actions in RGW due to improper bucket access. An unprivileged user can write to any bucket accessible by the signed key when a POST form-data b...

CVE-2023-50948

IBM Storage Fusion HCI 2.1.0–2.6.1 contains hard-coded credentials used for its own inbound authentication, outbound communication to external components, or encryption of internal data. Root cause is hard-coded credentials in versions 2.1.0–2.6.1. Impact as described: potential exposure of confi...

CVE-2024-22315

CVE-2024-22315 affects IBM Fusion and IBM Fusion HCI (versions 2.3.0–2.8.2). The root cause is an insecure network connection due to lack of egress/restriction on containerized environments, which could allow an attacker with access to a Fusion container to establish an external network connectio...

CVE-2025-36222

IBM Fusion and IBM Fusion HCI products are affected by CVE-2025-36222 due to insecure default configurations that could expose AMQStreams without client authentication, enabling unauthorized actions. Affected versions: IBM Fusion 2.2.0–2.10.1, IBM Fusion HCI 2.2.0–2.10.0, and IBM Fusion HCI for w...