CVE-2016-0908 — Isilon Onefs vulnerability

CWE-2644 documents4 sources
Severity
6.7MEDIUMNVD
EPSS
0.0%
top 88.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
EMC Isilon Onefs
Timeline
PublishedJun 4
Latest updateMay 17

Description

EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages1 packages

▶NVDemc/isilon_onefs24 versions+23

🔴Vulnerability Details

2
GHSA
GHSA-c46c-4gvr-3cwm: EMC Isilon OneFS 7↗2022-05-17
▶
CVEList
CVE-2016-0908: EMC Isilon OneFS 7↗2016-06-04
▶

📋Vendor Advisories

1
Microsoft
Microsoft Identity Manager XSS Elevation of Privilege Vulnerability↗2018-02-13
▶
CVE-2016-0908 — EMC Isilon Onefs vulnerability | cvebase