Information disclosure in Pure Storage Flasharray

CVE-2025-2327

A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.

EPSS: 0.002 (8.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References