CVE-2022-32554

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to possibly exposed credentials for accessing the product’s management interface. The password may be known outside Pure Storage and could be used on an affected system, if reachable, to execute arbitrary instructions with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software.

• https://support.purestorage.com/Pure_Security/Security_Bundle_2022-04-04/Security_Advisory_for_%E2%80%9Csecurity-bundle-2022-04-04Mitigation, Vendor Advisory
• https://support.purestorage.com/Pure_Security/Security_Bundle_2022-04-04/Security_Advisory_for_%E2%80%9Csecurity-bundle-2022-04-04Mitigation, Vendor Advisory

Published

Jun 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-32549Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.…5.3
• CVE-2022-3255If an attacker can control a script that is executed in the …4.8
• CVE-2022-32550An issue was discovered in AgileBits 1Password, involving th…4.8
• CVE-2022-32551Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows p…7.5
• CVE-2022-32552Pure Storage FlashArray products running Purity//FA 6.2.0 - …8.8
• CVE-2022-32553Pure Storage FlashArray products running Purity//FA 6.2.0 - …8.8
• CVE-2022-32555Unisys Data Exchange Management Studio before 6.0.IC2 and 7.…8.8
• CVE-2022-32556An issue was discovered in Couchbase Server before 7.0.4. A …7.5
• CVE-2022-32557An issue was discovered in Couchbase Server before 7.0.4. Th…7.5
• CVE-2022-32558An issue was discovered in Couchbase Server before 7.0.4. Sa…7.5
• CVE-2022-32559An issue was discovered in Couchbase Server before 7.0.4. Ra…9.1
• CVE-2022-3256Use After Free in GitHub repository vim/vim prior to 9.0.053…7.8