PT-2024-10439 · Ibm · Ibm Fusion+1

Published 2024-12-17 · Updated 2025-08-19 · CVE-2024-22315

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Fusion and IBM Fusion HCI versions 2.3.0 through 2.8.2

Description The issue is related to insufficient restriction of the communication channel for given endpoints, which may allow an attacker to gain unauthorized access to protected information. An attacker who gains access to a Fusion container can establish an external network connection due to insecure network connection.

Recommendations For versions 2.3.0 through 2.8.2, update to a version that addresses the insecure network connection issue to prevent attackers from establishing external network connections. As a temporary workaround, consider restricting access to Fusion containers to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-923

Related Identifiers

BDU:2025-00978

CVE-2024-22315

Affected Products

Ibm Fusion

Ibm Fusion Hci

References · 8

• https://ibm.com/support/pages/node/7179168 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-22315 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22315 · Security Note
• https://bdu.fstec.ru/vul/2025-00978 · Security Note
• https://twitter.com/CVEnew/status/1884183326837403710 · Twitter Post
• https://t.me/cvenotify/108811 · Telegram Post
• https://t.me/cveNotify/132802 · Telegram Post
• https://t.me/cvedetector/16561 · Telegram Post