CVE-2023-36627

CVSS 3.1 Score 2.7 of 10 (low)

Details

Published Oct 2, 2023
Updated: Oct 5, 2023

Summary

CVE-2023-36627 is a vulnerability affecting Purity, the data management software of FlashBlade systems. An issue resides where users with administrative access can manipulate timezone settings, disrupting snapshot schedules configured on a timezone-dependent basis. This vulnerability can potentially lead to data loss or inconsistencies. Users are advised to update their systems to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share