Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-15140 1 Everpure 1 Portworx Operator 2026-09-10 N/A
A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access than intended, potentially resulting in elevated privileges within the Kubernetes cluster.
CVE-2026-6445 1 Everpure 1 Flasharray 2026-06-10 N/A
A flaw exists in FlashArray Purity where insufficient filtering of certain data paths could expose sensitive information to an authenticated user with low privileges.
CVE-2026-6444 1 Everpure 1 Flasharray 2026-06-10 N/A
A flaw exists in the FlashArray Purity management interface where an authenticated low-privileged user may, under specific conditions, access functionality beyond their assigned privileges.