CVE-2023-4976: FlashBlade Authentication Mechanism Vulnerability
A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.
Other sources
A flaw exists in Purity//FB whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.
— NVD
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4976?
CVE-2023-4976 has been rated as a critical vulnerability due to its potential for granting unauthorized privileged access to an attacker.
How do I fix CVE-2023-4976?
To remediate CVE-2023-4976, it is recommended to apply the latest security patches provided by Pure Storage for both FlashBlade and Purity//FB products.
What types of systems are affected by CVE-2023-4976?
CVE-2023-4976 affects Pure Storage FlashBlade and Pure Storage Purity//FB systems with local account management interfaces.
What are the consequences of CVE-2023-4976 if exploited?
If exploited, CVE-2023-4976 allows an attacker to gain privileged access to the management interface, potentially leading to a full system compromise.
Is CVE-2023-4976 being actively exploited in the wild?
As of now, there is no public information indicating that CVE-2023-4976 is actively being exploited in the wild.