Purity//Fb
Approved changes feed: RSS · Atom
cpe:2.3:a:purestorage:purity\/\/fb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Purestorage (9c1f0ce0-bffe-5be6-a7df-d16119844a3d) |
|---|---|
| Product | Purity//Fb (273bf50e-dd34-59a7-ac33-b8d70ce4a08f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0005 |
vulnerable | 2026-06-08 06:21:57.669617 |
Details available
CRITICAL (9.1)
A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.
Published: 2024-09-23T17:34:11.321Z
Updated: 2024-09-24T13:49:20.771Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32554 |
vulnerable | 2026-06-08 05:44:45.125299 |
Details available
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to possibly exposed credentials for accessing the product’s management interface. The password may be known outside Pure Storage and could be used on an affected system, if reachable, to execute arbitrary instructions with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software.
Published: 2022-06-22T14:25:48.000Z
Updated: 2024-08-03T07:46:44.639Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32553 |
vulnerable | 2026-06-08 05:44:45.124683 |
Details available
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to a privilege escalation via the manipulation of environment variables which can be exploited by a logged-in user to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software.
Published: 2022-06-22T14:07:35.000Z
Updated: 2024-08-03T07:46:43.565Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32552 |
vulnerable | 2026-06-08 05:44:45.124174 |
Details available
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to a privilege escalation via the manipulation of Python environment variables which can be exploited by a logged-in user to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software.
Published: 2022-06-22T14:22:29.000Z
Updated: 2024-08-03T07:46:43.612Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.