Description
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PureStorage | FlashArray | 6.6.2 – ≤ 6.6.5 | — |
Critical · 9.8
CVE-2024-3057
EUVD-2024-31663GHSA-pcmh-phr9-pvjv
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.
Published Oct 8, 2024 · Updated Apr 10, 2025 · Assigned by PureStorage