PT-2023-21679 · Pure Storage · Flashblade Purity
CVE-2023-28372
·
Publicado
2023-10-02
·
Atualizado
2024-09-20
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FlashBlade Purity (OE) version 4.1.0
Description
A flaw exists in FlashBlade Purity (OE) whereby a user with privileges to extend an object's retention period can affect the availability of the object lock.
Recommendations
For version 4.1.0, consider restricting privileges to extend an object's retention period to minimize the risk of exploitation until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Flashblade Purity