Home

Description

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

PUBLISHED Reserved 2023-11-01 | Published 2024-09-23 | Updated 2024-09-23 | Assigner PureStorage




CRITICAL: 10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-287 Improper Authentication

Product status

Default status
unaffected

5.3.17 (custom)
affected

6.1.8 (custom)
affected

6.0.7 (custom)
affected

6.2.0 (custom)
affected

6.3.0 (custom)
affected

6.4.0 (custom)
affected

6.5.0 (custom)
affected

References

purestorage.com/security vendor-advisory

cve.org (CVE-2024-0002)

nvd.nist.gov (CVE-2024-0002)