CVE-2023-28372

Опубликовано: 02 окт. 2023

Источник: nvd

CVSS3: 6.5

CVSS3: 2.7

EPSS Низкий

Описание

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

Ссылки

https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Object_Store_Privileged_Access_Vulnerability_CVE-2023-28372
Vendor Advisory
https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Object_Store_Privileged_Access_Vulnerability_CVE-2023-28372
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:purestorage:purity:*:*:*:*:*:*:*:*

Версия до 4.1.0 (включая)

EPSS

Процентиль: 9%

0.00031

Низкий

6.5 Medium

CVSS3

2.7 Low

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-284

Связанные уязвимости

GHSA-p4hf-76x7-9vqg

CVSS3: 6.5

github

больше 2 лет назад

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

EPSS

Процентиль: 9%

0.00031

Низкий

6.5 Medium

CVSS3

2.7 Low

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-284