« Volver al listado

CVE-2024-22315

Estado: AnalizadaMedia (6.5)—

IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

IBM — Storage FusionIBM — Storage Fusion HCIIBM — Storage Fusion HCI FOR Watsonx

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-22315",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-22315",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-28T14:53:21.791243Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 1.4
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:storage_fusion_hci:2.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:storage_fusion_hci:2.8.2:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "Fusion",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "2.8.2"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "IBM",
          "product": "Fusion HCI",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "2.8.2"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "IBM",
          "product": "Fusion HCI for watsonx",
          "versions": [
            {
              "status": "affected",
              "version": "2.8.2"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-01-28T02:15:28.603",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7179168",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-923"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection."
    },
    {
      "lang": "es",
      "value": "IBM Fusion e IBM Fusion HCI 2.3.0 a 2.8.2 son vulnerables a una conexión de red insegura al permitir que un atacante que obtenga acceso a un contenedor de Fusion establezca una conexión de red externa."
    }
  ],
  "lastModified": "2026-06-17T07:11:10.217",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:storage_fusion:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D227814-2937-46C2-957C-57D4F07FB1D7",
              "versionEndExcluding": "2.9.0",
              "versionStartIncluding": "2.3.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:storage_fusion_hci:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BC1445C-4214-4080-83EF-F8F2796B29BC",
              "versionEndExcluding": "2.9.0",
              "versionStartIncluding": "2.3.0"
            },
            {
              "criteria": "cpe:2.3:a:ibm:storage_fusion_hci_for_watsonx:2.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E892F5BD-4E2A-4DF7-8486-213965077B39"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}