CVE-2023-36628: Purestorage Purity//fa

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

Affected products

• Purestorage Purity//fa: from 6.1.0, up to and including 6.3.11; from 6.4.0, up to and including 6.4.5

Published 2023-10-03. Last modified 2026-06-17.