CVE-2023-4976

A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - psirt@purestorage.com

Published

2024-07-17

Last modified

2025-04-10

Weaknesses

CWE-269

Affected products

• Flashblade (Purestorage)

References

• https://www.purestorage.com/security
• https://purestorage.com/security