Lucene search

[email protected]CVE-2015-6848

HistoryNov 27, 2015 - 2:59 a.m.

CVE-2015-6848

2015-11-2702:59:00

CWE-284

[email protected]

web.nvd.nist.gov

cve-2015-6848

emc

isilon onefs

security vulnerability

rfc 2307

sfu

root privileges

nvd

7 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

65.1%

JSON

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors.

CPENameOperatorVersion
emc:isilon_onefsemc isilon onefseq7.2.0.0
emc:isilon_onefsemc isilon onefseq7.1.1.3
emc:isilon_onefsemc isilon onefseq7.1.1.4
emc:isilon_onefsemc isilon onefseq7.2.0.1
emc:isilon_onefsemc isilon onefseq7.1.1.2
emc:isilon_onefsemc isilon onefsle7.1.1.0
emc:isilon_onefsemc isilon onefseq7.2.0.2
emc:isilon_onefsemc isilon onefseq7.2.1.0
emc:isilon_onefsemc isilon onefseq7.1.1.1

CPE	Name	Operator	Version
emc:isilon_onefs	emc isilon onefs	eq	7.2.0.0
emc:isilon_onefs	emc isilon onefs	eq	7.1.1.3
emc:isilon_onefs	emc isilon onefs	eq	7.1.1.4
emc:isilon_onefs	emc isilon onefs	eq	7.2.0.1
emc:isilon_onefs	emc isilon onefs	eq	7.1.1.2
emc:isilon_onefs	emc isilon onefs	le	7.1.1.0
emc:isilon_onefs	emc isilon onefs	eq	7.2.0.2
emc:isilon_onefs	emc isilon onefs	eq	7.2.1.0
emc:isilon_onefs	emc isilon onefs	eq	7.1.1.1

References

seclists.org/bugtraq/2015/Nov/121

7 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

65.1%

JSON

Related for CVE-2015-6848

cvelist1 prion1