Description
A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PureStorage | FlashBlade | 3.3.5 – ≤ 3.3.10, 4.0.4 – ≤ 4.0.6, 4.1.0 – ≤ 4.1.8, 4.2.0 – ≤ 4.2.2 | — |