A flaw exists in FlashBlade whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.

A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.

A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.

A vulnerability exists in FlashBlade whereby sensitive information may be logged under specific conditions.

Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service.

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.