CVE-2024-0001

Pure Storage / FlashArray PUBLISHED

Description (CNA)

A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.

Affected (CNA)

Vendor / product	Versions
Pure Storage / FlashArray	affected 6.3.0 through 6.3.14; affected 6.4.0 through 6.4.10

CWE

CWE-1188

References

https://purestorage.com/security

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.