Lucene search

K
nvd[email protected]NVD:CVE-2023-32572
HistoryOct 03, 2023 - 12:15 a.m.

CVE-2023-32572

2023-10-0300:15:09
web.nvd.nist.gov
flasharray purity
flaw
pgroup
safemode
disablement

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

16.1%

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection.

Affected configurations

NVD
Node
purestoragepurity\/\/faRange6.3.06.3.7
OR
purestoragepurity\/\/faRange6.4.06.4.1

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

0.0005 Low

EPSS

Percentile

16.1%

Related for NVD:CVE-2023-32572