CVE-2024-0004
EUVD-2024-1580723.09.2024, 18:15
A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| purestorage | purity\/\/fa | 5.0.0 ≤ 𝑥 ≤ 5.0.11 |
| purestorage | purity\/\/fa | 5.1.0 ≤ 𝑥 ≤ 5.1.17 |
| purestorage | purity\/\/fa | 5.2.0 ≤ 𝑥 ≤ 5.2.7 |
| purestorage | purity\/\/fa | 5.3.0 ≤ 𝑥 ≤ 5.3.21 |
| purestorage | purity\/\/fa | 6.0.0 ≤ 𝑥 ≤ 6.0.9 |
| purestorage | purity\/\/fa | 6.1.0 ≤ 𝑥 ≤ 6.1.25 |
| purestorage | purity\/\/fa | 6.2.0 ≤ 𝑥 ≤ 6.2.17 |
| purestorage | purity\/\/fa | 6.3.0 ≤ 𝑥 ≤ 6.3.14 |
| purestorage | purity\/\/fa | 6.4.0 ≤ 𝑥 ≤ 6.4.10 |
| purestorage | purity\/\/fa | 6.5.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| purestorage | flasharray | 6.2.0 ≤ 𝑥 ≤ 6.2.17 | ADP |
| purestorage | flasharray | 6.3.0 ≤ 𝑥 ≤ 6.3.14 | ADP |
| purestorage | flasharray | 6.4.0 ≤ 𝑥 ≤ 6.4.10 | ADP |
| purestorage | flasharray | 6.1.0 ≤ 𝑥 ≤ 6.1.25 | ADP |
| purestorage | flasharray | 6.0.0 ≤ 𝑥 ≤ 6.0.9 | ADP |
| purestorage | flasharray | 5.0.0 ≤ 𝑥 ≤ 5.0.11 | ADP |
| purestorage | flasharray | 5.1.0 ≤ 𝑥 ≤ 5.1.17 | ADP |
| purestorage | flasharray | 5.2.0 ≤ 𝑥 ≤ 5.2.7 | ADP |
| purestorage | flasharray | 5.3.0 ≤ 𝑥 ≤ 5.3.21 | ADP |
References