CVE-2023-28372

LOW EPSS 36.3%

Published Oct 2, 20232y ago · Modified Jun 17, 20262w ago

2.7 CVSS 3.1

Low

Published Oct 2, 2023 2y ago

Last Modified Jun 17, 2026 2w ago

Description

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock.

CVSS Details

Base Score

2.7

Exploitability

1.2

Impact

1.4

Vector string

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability Low

Threat Intelligence

EPSS Exploit Probability

36.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-284

Affected Products 1

Vendor	Product	Version	Range
purestorage	purity	*	≤4.1.0

References 1

support.purestorage.com https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_for_FlashBlade_Object_Store_Privileged_Access_Vulnerability_CVE-2023-28372

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.