CVE-2023-46159 is a denial-of-service vulnerability affecting IBM Storage Ceph versions 5.3z1, 5.3z5, and 6.1z1. An authenticated network user can exploit this flaw to disrupt the RGW service. With a CVSS score of 6.5 (Medium), it has a low attack complexity and requires authentication, but can lead to high availability impact. Currently, there is no known public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.3z1CPE matchmatch criteria | cpe:2.3:a:ibm:storage_ceph:5.3z1:*:*:*:*:*:*:* | ||
5.3z5CPE matchmatch criteria | cpe:2.3:a:ibm:storage_ceph:5.3z5:*:*:*:*:*:*:* | ||
6.1z1CPE matchmatch criteria | cpe:2.3:a:ibm:storage_ceph:6.1z1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.