What’s Vulnerable › Vulnerabilities

CVE-2023-32572: FlashArray pgroup Retention Lock SafeMode Protection

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-10-03 · updated 2026-06-17
• Weakness: CWE-284

Description

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection.

Affected products

• PureStorage Purity//Fa: from 6.3.0 through 6.3.7; from 6.4.0 through 6.4.1

References

• https://https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_-_FlashArray_pgroup_Retention_Lock_SafeMode_Protection_CVE-2023-32572
• https://https://support.purestorage.com/Pure_Storage_Technical_Services/Field_Bulletins/Security_Bulletins/Security_Bulletin_-_FlashArray_pgroup_Retention_Lock_SafeMode_Protection_CVE-2023-32572

Get alerted when CVE-2023-32572 or the next vulnerability affects your stack