PatchTheCVEpurity vulnerabilities and fixes
Recent CVEs affecting purity, with upgrade or downgrade steps. 5 tracked.
purity has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-10-02. Highest priority: CVE-2023-36627 (score 39/100).
- CVE-2023-36627 HIGH 7.7 UPGRADE A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade tha
- CVE-2023-31042 HIGH 7.7 UPGRADE A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store prot
- CVE-2023-28372 MEDIUM 6.5 UPGRADE A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s ret
- CVE-2017-7352 MEDIUM 5.4 DOWNGRADE Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users
- CVE-2002-1124 HIGH 7.2 DOWNGRADE Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
FAQ
How do I fix purity vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is purity being exploited right now?
None of the tracked purity CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which purity CVE should I patch first?
CVE-2023-36627 currently ranks highest (39/100): A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade tha.