CVE-2023-31042: FlashBlade Object Store Protocol

Q: What is CVE-2023-31042?

CVE-2023-31042 is a vulnerability in FlashBlade Purity that allows an authenticated user to impact the availability of the system's data access and replication protocols.

Q: How does CVE-2023-31042 affect FlashBlade Purity?

CVE-2023-31042 affects FlashBlade Purity by allowing an authenticated user with access to FlashBlade's object store protocol to impact the availability of the system's data access and replication protocols.

Q: What is the severity of CVE-2023-31042?

CVE-2023-31042 has a severity level of high.

Q: Which versions of FlashBlade Purity are affected by CVE-2023-31042?

FlashBlade Purity versions 3.3.6 to 4.1.1 are affected by CVE-2023-31042.

Q: How can I fix CVE-2023-31042?

To fix CVE-2023-31042, it is recommended to update FlashBlade Purity to a version that is not affected, such as 4.1.2 or newer.

Published Oct 2, 2023

Updated

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

Affected Software

3 affected components

PureStorage Purity<=3.3.6

PureStorage Purity>=4.0.0<=4.0.4

PureStorage Purity>=4.1.0<=4.1.1

Remediation

Information

This issue is resolved in FlashBlade Purity (OE) versions 3.3.7 or later, 4.0.5 or later, 4.1.2 or later.

Event History

Oct 2, 2023

CVE Published

via MITRE·10:39 PM

Data Sourced

via MITRE·10:39 PM

RemedyDescriptionSeverity

Frequently Asked Questions

What is CVE-2023-31042?

CVE-2023-31042 is a vulnerability in FlashBlade Purity that allows an authenticated user to impact the availability of the system's data access and replication protocols.

How does CVE-2023-31042 affect FlashBlade Purity?