VULNERABILITY INTELLIGENCE
CVE-2024-22315
CVSS score4 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-01-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Description
IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.
Weakness classification
- CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
Primary references
- psirt@us.ibm.com — Vendor Advisory