Privilege escalation

2023-10-0300:15:00

PRIOn knowledge base

www.prio-n.com

vasa

privilege escalation

root access

vsphere/esxi

vmware admin

flasharray

nvd

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

CPENameOperatorVersion
purity\\/\\/fage6.1.0
purity\\/\\/fale6.3.11
purity\\/\\/fage6.4.0
purity\\/\\/fale6.4.5

Name	Operator	Version
purity\\/\\/fa	ge	6.1.0
purity\\/\\/fa	le	6.3.11
purity\\/\\/fa	ge	6.4.0
purity\\/\\/fa	le	6.4.5

References

support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_Privilege_Escalation_in_VASA_CVE-2023-36628