CVE-2023-36628 (published 2023-10-02T23:15:28.716Z)
A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

Affected products: Vendor: Pure Storage
Product: FlashArray Purity
Versions: 6.1.*, 6.2.*, 6.3.0, 6.4.0