CVE-2016-9870 — LDAP Injection in Dell EMC Isilon Onefs

CWE-90 — LDAP Injection3 documents3 sources
Severity
6.7MEDIUMNVD
EPSS
0.1%
top 78.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell EMC Isilon OnefsEMC Isilon Onefs
Timeline
PublishedJan 23
Latest updateMay 17

Description

EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentially be exploited by a malicious user to compromise the system.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶NVDemc/isilon_onefs26 versions+25
▶CVEListV5dell/emc_isilon_onefsEMC Isilon OneFS

🔴Vulnerability Details

2
GHSA
GHSA-8p37-98j5-xm75: EMC Isilon OneFS 8↗2022-05-17
▶
CVEList
CVE-2016-9870: EMC Isilon OneFS 8↗2017-01-23
▶
CVE-2016-9870 — LDAP Injection in Dell EMC Isilon Onefs | cvebase