CVE-2023-31042

Published: Oct 2, 2023Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

Affected (3)

Products: Purestorage: Purity

Purestorage

1 product

Purity

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Purestorage Purity	Up to 3.3.6
Purestorage Purity	From 4.0.0 to 4.0.4
Purestorage Purity	From 4.1.0 to 4.1.1

References (2)

https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/Security_Bulletin_for_FlashBlade_Object_Store_Protocol_CVE-2023-31042

Source: psirt@purestorage.com

Vendor Advisory

https://support.purestorage.com/Employee_Handbooks/Technical_Services/PSIRT/Security_Bulletin_for_FlashBlade_Object_Store_Protocol_CVE-2023-31042

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.