CVE-2024-0004 in FlashArray Purity

Riassunto

di MITRE • 23/09/2024

A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: PureStorage
• Prenotare: 01/11/2023
• Divulgazione: 23/09/2024
• Moderazione: accettato
• Voce: VDB-278302
• CPE: pronto
• CWE: CWE-94 (confermato)
• CVSS: 9.1 (CNA)
• EPSS: 0.00642
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-0004
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-0004
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-0004/