← CVE Intelligence

CVE-2023-4976

FlashBlade Authentication Mechanism Vulnerability PUBLISHED

Description (CNA)

A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.

Affected (CNA)

Vendor / productVersions
PureStorage / FlashBladeaffected 3.3.5 through 3.3.10; affected 4.0.4 through 4.0.6; affected 4.1.0 through 4.1.8; affected 4.2.0 through 4.2.2

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.