title: FlashArray SafeMode Immutable Vulnerability
description: A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of data on the system including snapshots protected by SafeMode.
affected:
{
defaultStatus: unaffected
modules: SafeMode
product: FlashArray Purity
vendor: Pure Storage
versions:
lessThanOrEqual: 6.1.22, status: affected, version: 6.1.0, versionType: custom
lessThanOrEqual: 6.2.15, status: affected, version: 6.2.0, versionType: custom
lessThanOrEqual: 6.3.6, status: affected, version: 6.3.0, versionType: custom
status: affected, version: 6.4.0
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: This issue is resolved in FlashArray Purity (OE) versions 6.1.23 or later, 6.2.16 or later, 6.3.7 or later, 6.4.1 or later