CVE-2024-0001: Critical severity pure storage purity vulnerability
A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0001?
CVE-2024-0001 has been classified as a high severity vulnerability due to the potential for unauthorized elevated privileges.
How do I fix CVE-2024-0001?
To remediate CVE-2024-0001, disable the local account used for initial array configuration if it is still active.
Which versions of Purestorage Purity are affected by CVE-2024-0001?
CVE-2024-0001 affects Purestorage Purity versions from 6.3.0 to 6.3.14 and from 6.4.0 to 6.4.10.
What are the potential risks associated with CVE-2024-0001?
The risk associated with CVE-2024-0001 includes the possibility of a malicious actor gaining unauthorized access and control over the affected storage array.
Who reported CVE-2024-0001?
CVE-2024-0001 was reported by the security team at Pure Storage as part of their ongoing security assessment.