A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions.

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.

Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service.

A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.