Potential Privilege Escalation Vulnerability in FlashArray Purity

CVE-2024-0001

What is CVE-2024-0001?

A local account intended for the initial configuration of FlashArray Purity remains active, creating a security exposure. This vulnerability permits a malicious actor to exploit the inactive account, potentially leading to unauthorized access and elevated privileges within the system. Organizations using FlashArray Purity are advised to assess their security posture and implement necessary mitigations to protect against unauthorized access.

References