high8.8Public exploit code
CVE-2018-1213
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dell EMC Isilon OneFS - Multiple Vulnerabilities2018-02-14 · webapps · linux · Verified
Impact
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Isilon Onefs | from 7.2.1.0 through 7.2.1.6 from 8.0.0.0 through 8.0.0.6 from 8.0.1.0 through 8.0.1.2 from 8.1.0.0 through 8.1.0.1 Versions 7.1.1.11, 8.1.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2018/Mar/50
- http://www.securityfocus.com/bid/103033
- https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44039/
- http://seclists.org/fulldisclosure/2018/Mar/50
- http://www.securityfocus.com/bid/103033
- https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44039/