A flaw exists in Purity//FB whereby a local account is permitted to authenticate to the management interface using an unintended method that allows an attacker to gain privileged access to the array.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-4976
• https://purestorage.com/security