139 matches found
CVE-2024-3057
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation...
CVE-2024-3057
CVE-2024-3057 affects Pure Storage FlashArray. A flaw allows privilege escalation via a specific call to a FlashArray endpoint. Connected sources identify affected software as Pure Storage FlashArray with versions up to 6.6.5 (PT-2024-23497), and describe the underlying issue as a privilege escal...
CVE-2024-3057
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation...
PT-2024-23497 · Pure Storage · Pure Storage Flasharray
Name of the Vulnerable Software and Affected Versions: PureStorage FlashArray versions up to 6.6.5 Description: A flaw exists in PureStorage FlashArray, allowing a user to make a specific call to a FlashArray endpoint which enables privilege escalation. This issue can lead to improper privilege...
Pure Storage FlashArray Purity 安全漏洞
Pure Storage FlashArray Purity is a driver from the American company Pure Storage, Inc. It provides comprehensive data services. A security vulnerability exists in Pure Storage FlashArray Purity that originates from a user being able to make specific calls to endpoints that allow privilege...
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...
CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array...
CVE-2024-0004
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array...
CVE-2024-0001
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges...
CVE-2024-0002
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array...
CVE-2024-0002
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array...
CVE-2024-0003
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access...
CVE-2024-0003
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access...
CVE-2024-0001
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges...
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...
CVE-2024-0005
Summary: CVE-2024-0005 affects Pure Storage FlashArray and FlashBlade Purity. A condition in SNMP configuration handling could allow a remote attacker to execute arbitrary commands via a specially crafted SNMP config. Impact details (as documented): Network-vector, low attack complexity, no user ...
CVE-2024-0005
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration...
CVE-2024-0004
CVE-2024-0004 affects Pure Storage FlashArray Purity. A condition exists where a user with the array-admin role can remotely execute arbitrary commands to escalate privileges on the array. The available documents confirm the vulnerability topic and impact (remote command execution with high/criti...