CVE-2024-22315

Published: Jan 28, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Exploitability: 3.9 / Impact: 2.5

Source: NVD

Description

IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.

Affected (3)

Products: Ibm: Storage Fusion, Storage Fusion Hci, Storage Fusion Hci For Watsonx

Ibm

3 products

Storage Fusion

Storage Fusion Hci

Storage Fusion Hci For Watsonx

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Storage Fusion	From 2.3.0 to 2.9.0
Ibm Storage Fusion Hci	From 2.3.0 to 2.9.0
Ibm Storage Fusion Hci For Watsonx	Version 2.8.2

Related CWEs

CWE-923

Improper Restriction of Communication Channel to Intended Endpoints

The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

References (1)

https://www.ibm.com/support/pages/node/7179168

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.