Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-32553

EPSS 0.54% · P68
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-32553

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to a privilege escalation via the manipulation of environment variables which can be exploited by a logged-in user to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Pure Storage FlashBlade 和 FlashArray 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pure Storage FlashArray和Pure Storage FlashBlade都是美国Pure Storage公司的产品。Pure Storage FlashArray是一种全 QLC 闪存存储阵列。Pure Storage FlashBlade是一个用于文件和对象工作负载的整合存储平台。 Pure Storage存在安全漏洞，攻击者利用该漏洞可以通过操作环境变量来提升权限，以下产品和版本受到影响： FlashArray 6.2.0之前的版本，FlashBlade 3.3.0之前的版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-32553

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-32553

请登录查看更多情报信息。

Same Patch Batch · n/a · 2022-06-22 · 46 CVEs total

CVE-2022-3212874cms 跨站脚本漏洞
CVE-2022-3213174cms 跨站脚本漏洞
CVE-2022-3309374cms SQL注入漏洞
CVE-2022-3309674cms SQL注入漏洞
CVE-2022-3309774cms SQL注入漏洞
CVE-2022-34328PMB 跨站脚本漏洞
CVE-2022-33127Diffy 安全漏洞
CVE-2022-33124aiohttp 安全漏洞
CVE-2022-3309574cms SQL注入漏洞
CVE-2022-3212974cms 跨站脚本漏洞
CVE-2022-3213074cms 跨站脚本漏洞
CVE-2022-3212774cms 跨站脚本漏洞
CVE-2022-3212674cms 跨站脚本漏洞
CVE-2022-3212574cms 跨站脚本漏洞
CVE-2022-3212474cms 跨站脚本漏洞
CVE-2021-41432FlatPress 跨站脚本漏洞
CVE-2022-31361Docebo Community Edition SQL注入漏洞
CVE-2022-31362Docebo Community Edition 代码问题漏洞
CVE-2022-34295totd 安全特征问题漏洞
CVE-2022-31787IdeaTMS SQL注入漏洞

Showing top 20 of 46 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2022-32553

No comments yet

Leave a comment