Information disclosure in Pure Storage Flasharray
CVE-2025-2327
A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.
EPSS: 0.002 (8.5th percentile) — read the EPSS interpretation.
Affected products
- Pure Storage Flasharray — versions 6.0.0, 6.1.0, 6.2.0