flasharray vulnerabilities and exploits

(subscribe to this query)

A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.

Purestorage Flasharray 6.3.0 Purestorage Flasharray 6.4.0 Pure Storage Flasharray Purestorage Purity//fa

3 Github repositories

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service.

Pure Storage Flasharray

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.

Pure Storage Flasharray

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

Pure Storage Flasharray Purity Purestorage Purity//fa

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection.

Pure Storage Flasharray Purity Purestorage Purity//fa

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.

Pure Storage Flasharray Purity Purestorage Purity//fa Purestorage Purity//fa 6.4.0

A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

Purestorage Purity//fa Purestorage Purity//fa 6.5.0

1 Github repository

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

Purestorage Purity//fa Purestorage Purity//fa 6.5.0 Purestorage Purity//fa 6.6.0 Purestorage Purity//fb Purestorage Purity//fb 4.3.0 Purestorage Purity//fb 4.3.1

A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.

Purestorage Purity//fa Purestorage Purity//fa 6.5.0

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook