Privileged account creation via administrative service

Privilege escalation in Pure Storage FlashArray allows remote authenticated users to create a privileged account through an administrative service. Pure Storage has not disclosed which service or authorization error lets the request create an additional privileged account. A high-privilege account and network reachability to the service are required; successful exploitation grants persistent privileged access to array administration.