FlashArray Purity Vulnerability Allows Remote Access with Privileges

CVE-2024-0003

What is CVE-2024-0003?

A vulnerability exists in FlashArray Purity that can be exploited by a malicious user to leverage remote administrative services for account creation. This unauthorized access point may enable the attacker to gain privileged control over the storage system, leading to potential data breaches and operational disruptions. Organizations utilizing Pure Storage FlashArray arrays should review their security measures and ensure that only trusted administrative services are enabled to mitigate the risk associated with this vulnerability.

References