Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
9.1CRITICAL3.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Product Status

Learn more

Versions 7 Total

Default Status: unaffected

affected

  • affected from 5.3.17 through 5.3.21 
  • affected from 6.1.8 through 6.1.25 
  • affected from 6.0.7 through 6.0.9 
  • affected from 6.2.0 through 6.2.17 
  • affected from 6.3.0 through 6.3.14 
  • affected from 6.4.0 through 6.4.10 
  • affected at 6.5.0 

References 1 Total

Authorized Data Publishers

Learn more