CVE-2023-36628

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

CVE-2023-36628

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

CVE-2023-32572

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

CVE-2023-28373

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...

CVE-2023-28373

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...

CVE-2023-32572

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

Code injection

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...

Design/Logic Flaw

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

Privilege escalation

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

VASA Security Breach

VMware VASA is a virtual volume storage provider program from VMware. A security vulnerability exists in VASA that originates from allowing a user with access to the vSphere/ESXi VMware administrator on FlashArray to gain root access via privilege escalation...

Pure Storage FlashArray Security Vulnerability

The Pure Storage FlashArray is an all-QLC flash storage array from Pure Storage. A security vulnerability exists in FlashArray Purity, which arises from a flaw in FlashArray Purity that allows an array administrator to change the retention lock of a pgroup and disable pgroup SafeMode protection...

CVE-2023-36628

CVE-2023-36628 describes a privilege-escalation flaw in Pure Storage VASA. The issue arises when a user with access to a vSphere/ESXi administrator on a FlashArray can obtain root access, due to inadequate access control in the VASA component. Affected software is described as Pure Storage VASA (...

CVE-2023-36628 Privilege Escalation in VASA

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

CVE-2023-36628 Privilege Escalation in VASA

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

CVE-2023-32572 FlashArray pgroup Retention Lock SafeMode Protection

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

CVE-2023-32572 FlashArray pgroup Retention Lock SafeMode Protection

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

CVE-2023-32572

The CVE-2023-32572 entry concerns Pure Storage FlashArray Purity. Under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection. Affected component is FlashArray Purity’s pgroup retention lock mechanism; impact is integrity imp...

CVE-2023-28373

CVE-2023-28373 describes a flaw in FlashArray Purity where an array administrator configuring an external key manager can affect data availability, including SafeMode-protected snapshots. The connected documents confirm the impact on availability but do not specify exploit details or a confirmed ...

CVE-2023-28373 FlashArray SafeMode Immutable Vulnerability

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...

CVE-2023-28373 FlashArray SafeMode Immutable Vulnerability

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode...