Pure Storage FlashArray Purity (remote administrative account creation): An attacker uses a remote administrative

Impact

An attacker uses a remote administrative service to create a privileged account on the array - persistent backdoor access to the storage system.

Who can reach it

Remote network access with high privilege to the administrative service.

What to do

Apply the Purity update, then enumerate array accounts and remove any you did not create. Account review matters more than the version bump here.

References