Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-2327

FlashArray KEK Logging Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PureStorage

Description

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pure Storage FlashArray

Default version status: unaffected

  • 6.0.0 to ≤ 6.0.9affected
  • 6.1.0 to ≤ 6.1.25affected
  • 6.2.0 to ≤ 6.2.17affected
  • 6.3.0 to ≤ 6.3.21affected
  • 6.4.0 to ≤ 6.4.10affected
  • 6.5.0 to ≤ 6.5.10affected
  • 6.6.0 to ≤ 6.6.11affected
  • 6.7.0 to ≤ 6.7.3affected
  • 6.8.0 to ≤ 6.8.5affected

References