Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-2327 EUVD-2025-18421GHSA-pxv2-r799-mj6c

FlashArray KEK Logging Vulnerability

Published Jun 16, 2025 · Updated Jun 16, 2025 · Assigned by PureStorage

Description

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.

Affected products

VendorProductAffectedFixed
Pure Storage FlashArray 6.0.0 – ≤ 6.0.9, 6.1.0 – ≤ 6.1.25, 6.2.0 – ≤ 6.2.17, 6.3.0 – ≤ 6.3.21, 6.4.0 – ≤ 6.4.10, 6.5.0 – ≤ 6.5.10, 6.6.0 – ≤ 6.6.11, 6.7.0 – ≤ 6.7.3, 6.8.0 – ≤ 6.8.5 —

References