2024-09-23 20:03:19 +00:00
{
"id" : "CVE-2024-0005" ,
"sourceIdentifier" : "psirt@purestorage.com" ,
"published" : "2024-09-23T18:15:05.233" ,
2024-09-27 16:03:18 +00:00
"lastModified" : "2024-09-27T15:25:40.980" ,
"vulnStatus" : "Analyzed" ,
2024-09-23 20:03:19 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP configuration."
2024-09-26 14:03:23 +00:00
} ,
{
"lang" : "es" ,
"value" : "Existe una condici\u00f3n en FlashArray y FlashBlade Purity por la cual un usuario malintencionado podr\u00eda ejecutar comandos arbitrarios de forma remota a trav\u00e9s de una configuraci\u00f3n SNMP espec\u00edficamente manipulada."
2024-09-23 20:03:19 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
2024-09-27 16:03:18 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 8.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 5.9
} ,
2024-09-23 20:03:19 +00:00
{
"source" : "psirt@purestorage.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 9.1 ,
"baseSeverity" : "CRITICAL"
} ,
"exploitabilityScore" : 2.3 ,
"impactScore" : 6.0
}
]
} ,
"weaknesses" : [
2024-09-27 16:03:18 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-77"
}
]
} ,
2024-09-23 20:03:19 +00:00
{
"source" : "psirt@purestorage.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-77"
}
]
}
] ,
2024-09-27 16:03:18 +00:00
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.0.0" ,
"versionEndIncluding" : "5.0.11" ,
"matchCriteriaId" : "DB4713BD-F013-4129-B3B8-0B95CE69D8A6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.1.0" ,
"versionEndIncluding" : "5.1.17" ,
"matchCriteriaId" : "D5C7A1D2-E2AE-4737-AF3D-B46AFA52DBD7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.2.0" ,
"versionEndIncluding" : "5.2.7" ,
"matchCriteriaId" : "FA0303FA-81E7-41F8-B8F4-AD571E2B8D13"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.3.0" ,
"versionEndIncluding" : "5.3.21" ,
"matchCriteriaId" : "A1077938-9AEC-446A-BF07-ECEF798889E1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.0.0" ,
"versionEndIncluding" : "6.0.9" ,
"matchCriteriaId" : "DA37DE8B-32EB-4BDD-808B-0DDF18ADC33C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.1.0" ,
"versionEndIncluding" : "6.1.25" ,
"matchCriteriaId" : "C01E4DAE-CAA7-4EF9-B47D-B400E36B97F2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.2.0" ,
"versionEndIncluding" : "6.2.17" ,
"matchCriteriaId" : "3311847D-BE5E-4435-9B1B-DF8824DF55B4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.3.0" ,
"versionEndIncluding" : "6.3.14" ,
"matchCriteriaId" : "A81E5420-C4D6-42CD-93EB-0B0BCB01F918"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.4.0" ,
"versionEndIncluding" : "6.4.10" ,
"matchCriteriaId" : "07C73EC4-5F8C-422B-971F-0C8445E72145"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:6.5.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B75DE0E-3A1F-401A-85B0-EB7B7C8248D9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fa:6.6.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4BDB3666-13AA-4908-9CB9-4426A7F6ED56"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.0.0" ,
"versionEndIncluding" : "3.0.9" ,
"matchCriteriaId" : "2A921EA5-4877-4CA2-AA23-801C56890632"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.1.0" ,
"versionEndIncluding" : "3.1.5" ,
"matchCriteriaId" : "06BC3E85-9263-4BA8-9B6B-2FCEC0620746"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.2.0" ,
"versionEndIncluding" : "3.2.10" ,
"matchCriteriaId" : "8BD275B2-1F43-4B7B-9E68-49E0D07FA5B6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "3.3.0" ,
"versionEndIncluding" : "3.3.11" ,
"matchCriteriaId" : "46E8FF81-4F41-4B5D-B602-5C32B1B57602"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.0.0" ,
"versionEndIncluding" : "4.0.6" ,
"matchCriteriaId" : "6491F180-CB5E-4790-B7EF-618840C71E06"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.1.0" ,
"versionEndIncluding" : "4.1.10" ,
"matchCriteriaId" : "5B9D88CE-6331-4E11-B4C0-5DAD0B73911A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "4.2.0" ,
"versionEndIncluding" : "4.2.3" ,
"matchCriteriaId" : "202A85B4-5F81-4559-9326-12830063D99F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:4.3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6F372AC2-12D1-4CD7-923E-C8650C102C6C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:purestorage:purity\\/\\/fb:4.3.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4CEF944-7552-41DF-993E-6D3B1463B548"
}
]
}
]
}
] ,
2024-09-23 20:03:19 +00:00
"references" : [
{
"url" : "https://purestorage.com/security" ,
2024-09-27 16:03:18 +00:00
"source" : "psirt@purestorage.com" ,
"tags" : [
"Vendor Advisory"
]
2024-09-23 20:03:19 +00:00
}
]
}
