CVE-2023-36628

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@purestorage.com

Published

2023-10-03

Last modified

2024-09-23

Weaknesses

CWE-269

Affected products

• Flasharray Purity (Pure Storage)
• Purity//fa (Purestorage)

References

• https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_fo…