CVE-2023-36627: Purestorage Purity

Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly.

Affected products

• Purestorage Purity: up to and including 3.3.7; from 4.0.0, up to and including 4.0.5; from 4.1.0, up to and including 4.1.2

Published 2023-10-02. Last modified 2026-06-17.