Incorrect Snapshot Retention Timing in Pure Storage FlashArray May Lead to Data Loss

Under certain administrative conditions, FlashArray Purity may apply snapshot retention policies earlier or later than configured.

A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation.

FlashArray DOS Vulnerability

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service.

A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration.

A condition exists in FlashArray Purity whereby an user with array admin role can execute arbitrary commands remotely to escalate privilege on the array.

A condition exists in FlashArray Purity whereby a malicious user could use a remote administrative service to create an account on the array allowing privileged access.

A condition exists in FlashArray Purity whereby an attacker can employ a privileged account allowing remote access to the array.

A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active potentially allowing a malicious actor to gain elevated privileges.