Vulnerabilities > CVE-2023-36628 - Unspecified vulnerability in Purestorage Purity//Fa

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

purestorage

NVD

Published: 2023-10-03

Updated: 2024-11-21

Summary

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

Vulnerable Configurations

Part	Description	Count
Application	Purestorage Purestorage Purity//Fa 6.1.0 Purestorage Purity//Fa 6.1.8 Purestorage Purity//Fa 6.1.9 Purestorage Purity//Fa 6.1.10 Purestorage Purity//Fa 6.1.11 Purestorage Purity//Fa 6.1.12 Purestorage Purity//Fa 6.1.13 Purestorage Purity//Fa 6.1.14 Purestorage Purity//Fa 6.1.15 Purestorage Purity//Fa 6.1.16 Purestorage Purity//Fa 6.1.17 Purestorage Purity//Fa 6.1.18 Purestorage Purity//Fa 6.1.19 Purestorage Purity//Fa 6.1.20 Purestorage Purity//Fa 6.1.21 Purestorage Purity//Fa 6.1.22 Purestorage Purity//Fa 6.1.23 Purestorage Purity//Fa 6.1.24 Purestorage Purity//Fa 6.1.25 Purestorage Purity//Fa 6.2.0 Purestorage Purity//Fa 6.2.1 Purestorage Purity//Fa 6.2.2 Purestorage Purity//Fa 6.2.3 Purestorage Purity//Fa 6.2.4 Purestorage Purity//Fa 6.2.5 Purestorage Purity//Fa 6.2.6 Purestorage Purity//Fa 6.2.7 Purestorage Purity//Fa 6.2.8 Purestorage Purity//Fa 6.2.9 Purestorage Purity//Fa 6.2.10 Purestorage Purity//Fa 6.2.11 Purestorage Purity//Fa 6.2.12 Purestorage Purity//Fa 6.2.13 Purestorage Purity//Fa 6.2.14 Purestorage Purity//Fa 6.2.15 Purestorage Purity//Fa 6.2.16 Purestorage Purity//Fa 6.2.17 Purestorage Purity//Fa 6.3.0 Purestorage Purity//Fa 6.3.1 Purestorage Purity//Fa 6.3.2 Purestorage Purity//Fa 6.3.3 Purestorage Purity//Fa 6.3.4 Purestorage Purity//Fa 6.3.5 Purestorage Purity//Fa 6.3.6 Purestorage Purity//Fa 6.3.7 Purestorage Purity//Fa 6.3.8 Purestorage Purity//Fa 6.3.9 Purestorage Purity//Fa 6.3.10 Purestorage Purity//Fa 6.3.11 Purestorage Purity//Fa 6.4.0 Purestorage Purity//Fa 6.4.1 Purestorage Purity//Fa 6.4.2 Purestorage Purity//Fa 6.4.3 Purestorage Purity//Fa 6.4.4 Purestorage Purity//Fa 6.4.5	55

Summary

Vulnerable Configurations

References