IBM Fusion and IBM Fusion HCI Insecure Network Connection Vulnerability

A vulnerability exists in IBM Fusion and IBM Fusion HCI versions 2.3.0 through 2.8.2, allowing an attacker with access to a Fusion container to establish an external network connection. This issue arises from improper restriction of communication channels, enabling unauthorized data egress.

Impact

Exploitation of this vulnerability could lead to unauthorized external network connections from within a Fusion container, allowing for potential data exfiltration or communication with external malicious entities.

Remediation

Users are advised to upgrade to version 2.9.0. Instructions for upgrading can be found in the IBM Fusion README and the IBM Fusion HCI README.