CVE-2024-0002

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

Score

CVSS 3.1 10.0 Critical

Status

Analyzed - psirt@purestorage.com

Published

2024-09-23

Last modified

2024-09-23

Weaknesses

CWE-287

Affected products

• Flasharray (Purestorage)
• Purity//fa (Purestorage)

References

• https://purestorage.com/security