Most severe vulnerabilities for "pure storage purity" 5.1.17

Where

AND

Sort:

PureStorage Purity\/\/faCode Injection

Risk 72

Severity

9.1

Code Injection

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.

Remedy

First published (updated )

CVE-2024-0004

PureStorage Purity\/\/faCommand Injection

Risk 72

Severity

9.1

Command Injection

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

Remedy

Affected customers will need to apply a self-service patch bundle or upgrade their Purity to an unaffected Purity version. This issue is resolved in the following FlashArray Purity releases: * Purity//FA versions 6.3.15 or later * Purity//FA versions 6.5.1 or later * Purity//FA versions 6.6.1 or later. This issue is resolved in the following FlashBlade Purity releases: * Purity//FB versions 4.1.12 or later * Purity//FB versions 4.3.2 or later

First published (updated )

CVE-2024-0005

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

PureStorage Purity\/\/faCode Injection

Remedy

PureStorage Purity\/\/faCommand Injection

Remedy

Company

Resources

Contact