NetSight
critical9.0

CVE-2015-4525

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows …

Impact

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.

Affected products

VendorProductAffected versions
EmcIsilon Onefs
through 7.1.1.0
Versions 7.1.1.1, 7.1.1.2, 7.1.1.3, 7.1.1.4, 7.2.0.0

Weakness classification

References