CVE-2023-36627 — FlashBlade Snapshot Scheduler

Description (CNA)

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly.

Affected (CNA)

Vendor / product	Versions
Pure Storage / FlashBlade Purity	affected 0 through 3.3.7; affected 4.0.0 through 4.0.5; affected 4.1.0 through 4.1.2

CWE

No CWE identifiers supplied.

References

https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Snapshot_Scheduler_CVE-2023-36627

ADP enrichment

CVE

No English description supplied.

https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Snapshot_Scheduler_CVE-2023-36627

CISA-ADP

No English description supplied.

No references supplied.