CVEvulnerability
CVE-2023-28373
2.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2023-10-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Description
A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.
Affected configurations
• purestorage purity\/\/fa (>= 6.1.0 <= 6.1.22)
• purestorage purity\/\/fa (>= 6.2.0 <= 6.2.15)
• purestorage purity\/\/fa (>= 6.3.0 <= 6.3.6)
• purestorage purity\/\/fa 6.4.0
References
- https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/Security_Bulletin_for_FlashArray_SafeMode_Immutable_Vulnerability_CVE-2023-28373 Vendor Advisory
- https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/Security_Bulletin_for_FlashArray_SafeMode_Immutable_Vulnerability_CVE-2023-28373 Vendor Advisory