Skip to content
OpenAdvisories
Critical · 10.0 CVE-2024-0002 EUVD-2024-15805GHSA-ww64-xcqm-5jhf

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

Published Sep 23, 2024 · Updated Sep 23, 2024 · Assigned by PureStorage

Description

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

Affected products

VendorProductAffectedFixed
PureStorage FlashArray 5.3.17 – ≤ 5.3.21, 6.1.8 – ≤ 6.1.25, 6.0.7 – ≤ 6.0.9, 6.2.0 – ≤ 6.2.17, 6.3.0 – ≤ 6.3.14, 6.4.0 – ≤ 6.4.10, 6.5.0 —

References