Vulnerability Description
A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.
CVSS Score
4.4
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Purestorage | Purity\/\/Fa | >= 6.1.0, <= 6.1.22 |
References
- https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/SecuVendor Advisory
- https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/SecuVendor Advisory
FAQ
What is CVE-2023-28373?
CVE-2023-28373 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.
How severe is CVE-2023-28373?
CVE-2023-28373 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28373?
Check the references section above for vendor advisories and patch information. Affected products include: Purestorage Purity\/\/Fa.