FlashBlade vulnerabilities

2 known vulnerabilities in FlashBlade from PureStorage. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FlashArray: Improper Neutralization of Special Elements used in a Command

  CVE-2024-0005Sep 23, 2024PureStorage

  A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

• 9.3 Critical severity

  FlashBlade: Improper Privilege Management

  CVE-2023-4976Jul 17, 2024PureStorage

  A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.