Filtered by vendor Purestorage
Subscriptions
Filtered by product Flasharray
Subscriptions
Total
5 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-0005 | 1 Purestorage | 2 Flasharray, Flashblade | 2024-09-24 | 9.1 Critical |
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration. | ||||
CVE-2024-0004 | 1 Purestorage | 1 Flasharray | 2024-09-24 | 9.1 Critical |
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array. | ||||
CVE-2024-0003 | 1 Purestorage | 1 Flasharray | 2024-09-24 | 9.1 Critical |
A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access. | ||||
CVE-2024-0002 | 1 Purestorage | 1 Flasharray | 2024-09-23 | 10 Critical |
A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array. | ||||
CVE-2024-0001 | 1 Purestorage | 1 Flasharray | 2024-09-23 | 10 Critical |
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges. |
Page 1 of 1.