NetSight
critical9.1

CVE-2024-0004

A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.

Impact

A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.

Affected products

VendorProductAffected versions
PurestoragePurity\/\/Fa
from 5.0.0 through 5.0.11
from 5.1.0 through 5.1.17
from 5.2.0 through 5.2.7
from 5.3.0 through 5.3.21
from 6.0.0 through 6.0.9
from 6.1.0 through 6.1.25

Weakness classification

References