CVE-2023-28373: FlashArray SafeMode Immutable Vulnerability
A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-28373?
CVE-2023-28373 is a vulnerability in FlashArray Purity that allows an array administrator to affect the availability of data on the system, including snapshots protected by SafeMode, by configuring an external key manager.
How does CVE-2023-28373 affect FlashArray Purity?
CVE-2023-28373 affects FlashArray Purity by potentially impacting the availability of data on the system, including the security of snapshots protected by SafeMode.
What versions of FlashArray Purity are affected by CVE-2023-28373?
FlashArray Purity versions 6.1.0 to 6.1.22, 6.2.0 to 6.2.15, 6.3.0 to 6.3.6, and 6.4.0 are affected by CVE-2023-28373.
What is the severity of CVE-2023-28373?
CVE-2023-28373 has a severity level keyword of 'medium' and a severity value of 2.7.
How can I fix CVE-2023-28373?
To fix CVE-2023-28373, it is recommended to update FlashArray Purity to a version that is not affected by the vulnerability. Refer to the vendor's security bulletin for more information on available patches.