CVE-2017-4979
HighSummary
EMC Isilon OneFS versions 8.0.1.0, 8.0.0.0 - 8.0.0.2, 7.2.1.0 - 7.2.1.3, and 7.2.0.x are affected by an NFS export vulnerability. After upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports.
Risk Assessment
This vulnerability may lead to unauthorized access to data, posing a significant threat to information security within the organization.
Recommendation
It is recommended to upgrade to the latest version of OneFS to mitigate the risks associated with this vulnerability.
Other vulnerabilities in EMC Isilon OneFS
See all- CVE-2017-4988High
EMC Isilon OneFS versions 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, and 7.1.x are affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system.
- CVE-2017-4980High
EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected system. Affected versions are 7.1.0 - 7.1.1.10, 7.2.0 - 7.2.1.3, and 8.0.0 - 8.0.0.1.
- CVE-2015-4545High
EMC Isilon OneFS versions 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allow remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session.
- CVE-2015-6848High
In EMC Isilon OneFS versions 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, remote authenticated AD users can obtain root privileges via unspecified vectors.
- CVE-2015-4525High
The log-gather implementation in the web administration interface in EMC Isilon OneFS versions 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
- CVE-2015-0528High
The RPC daemon in EMC Isilon OneFS versions 6.5.x and 7.0.x before 7.0.2.13, 7.1.0 before 7.1.0.6, 7.1.1 before 7.1.1.2, and 7.2.0 before 7.2.0.1 allows local users to gain privileges by modifying system files.
Original NVD description (English source)
EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports.