CVE-2017-14380 - Vulnerability Details

Vendors	Products
Emc	Isilon Onefs

Link	Providers
http://seclists.org/fulldisclosure/2017/Dec/41
http://www.securityfocus.com/bid/102210

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x", "vendor": "n/a", "versions": [{"status": "affected", "version": "EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x"}]}], "datePublic": "2017-12-13T00:00:00", "descriptions": [{"lang": "en", "value": "In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode."}], "problemTypes": [{"descriptions": [{"description": "Privilege Escalation Vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-12-19T10:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://seclists.org/fulldisclosure/2017/Dec/41"}, {"name": "102210", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/102210"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2017-14380", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x", "version": {"version_data": [{"version_value": "EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Privilege Escalation Vulnerability"}]}]}, "references": {"reference_data": [{"name": "http://seclists.org/fulldisclosure/2017/Dec/41", "refsource": "CONFIRM", "url": "http://seclists.org/fulldisclosure/2017/Dec/41"}, {"name": "102210", "refsource": "BID", "url": "http://www.securityfocus.com/bid/102210"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:27:40.598Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2017/Dec/41"}, {"name": "102210", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/102210"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2017-14380", "datePublished": "2017-12-13T20:00:00", "dateReserved": "2017-09-12T00:00:00", "dateUpdated": "2024-08-05T19:27:40.598Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x (string)

}

]

}

]

datePublic : 2017-12-13T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Privilege Escalation Vulnerability (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-12-19T10:57:01 (string)

orgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

shortName : dell (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://seclists.org/fulldisclosure/2017/Dec/41 (string)

}

1 : { »

name : 102210 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/102210 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security_alert@emc.com (string)

ID : CVE-2017-14380 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x (string)

version : { »

version_data : [ »

0 : { »

version_value : EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Privilege Escalation Vulnerability (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : http://seclists.org/fulldisclosure/2017/Dec/41 (string)

refsource : CONFIRM (string)

url : http://seclists.org/fulldisclosure/2017/Dec/41 (string)

}

1 : { »

name : 102210 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/102210 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T19:27:40.598Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://seclists.org/fulldisclosure/2017/Dec/41 (string)

}

1 : { »

name : 102210 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/102210 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : c550e75a-17ff-4988-97f0-544cde3820fe (string)

assignerShortName : dell (string)

cveId : CVE-2017-14380 (string)

datePublished : 2017-12-13T20:00:00 (string)

dateReserved : 2017-09-12T00:00:00 (string)

dateUpdated : 2024-08-05T19:27:40.598Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEDB97FE-6470-4AFE-A3B0-B664F132A190", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "A669BE6B-726F-4F34-A009-798E32FF6895", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "4AE74624-A44D-4837-AD36-DBF3E93D5ED9", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "47CBA2E5-6E46-4922-B56B-3F8C578074B1", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "90C22C93-9069-406E-9A14-03F20AD34D11", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "CDD30754-489E-42BA-8B51-1FEB5DC30912", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7F551F88-3176-4E92-AE7A-FCAB3A220A45", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "26144325-6722-48C1-A0C2-BB78EF9BDE60", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "B87E8EEE-42AA-48B3-ABBE-9CE7FD2C275B", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "6F09B14D-2C84-47F2-8F7F-6F8DAEFFF106", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "5F6E200D-49D6-492C-8B38-CBED90CA8118", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "10B1B998-AEEE-4123-82F3-72D84EF681DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0828B061-28B4-4AEE-BBB9-AF287B90713C", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "064C487D-517E-4F7B-A182-5DF287477652", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "D1600B1F-C307-457B-BC84-73339A64DF8D", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "CE2687A1-97EC-4777-9CC1-164D525C56E5", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "08C3C4C1-505B-4171-831B-7FD7EB34B45C", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "AB53E775-7A57-41D2-A93D-5F96D72622D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A17F44A3-8C09-49EE-8545-51C57F36B801", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "11DF0A4B-702E-4E6B-AD2D-086F76B6DBB2", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "80042980-E2BB-49F0-A3DB-BE22ECF820C9", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "217B6DC1-07E4-4A1E-8867-85C258778E5B", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "847B0C10-6DCA-49FE-836C-F547B573A647", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode."}, {"lang": "es", "value": "En EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x y 7.1.1.x, un usuario con una cuenta de compliance admin (compadmin) puede explotar una vulnerabilidad en los scripts de mantenimiento isi_get_itrace o isi_get_profile para ejecutar cualquier script shell como root del sistema en un cl\u00faster en modo compliance. Esto podr\u00eda conducir a una elevaci\u00f3n de privilegios para el usuario compadmin y vulnerar el modo compliance."}], "id": "CVE-2017-14380", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-12-13T20:29:00.207", "references": [{"source": "security_alert@emc.com", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2017/Dec/41"}, {"source": "security_alert@emc.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/102210"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2017/Dec/41"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/102210"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : DEDB97FE-6470-4AFE-A3B0-B664F132A190 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A669BE6B-726F-4F34-A009-798E32FF6895 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 4AE74624-A44D-4837-AD36-DBF3E93D5ED9 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 47CBA2E5-6E46-4922-B56B-3F8C578074B1 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 90C22C93-9069-406E-9A14-03F20AD34D11 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.1.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : CDD30754-489E-42BA-8B51-1FEB5DC30912 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F551F88-3176-4E92-AE7A-FCAB3A220A45 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 26144325-6722-48C1-A0C2-BB78EF9BDE60 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : B87E8EEE-42AA-48B3-ABBE-9CE7FD2C275B (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 6F09B14D-2C84-47F2-8F7F-6F8DAEFFF106 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.0.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 5F6E200D-49D6-492C-8B38-CBED90CA8118 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 10B1B998-AEEE-4123-82F3-72D84EF681DC (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 0828B061-28B4-4AEE-BBB9-AF287B90713C (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 064C487D-517E-4F7B-A182-5DF287477652 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : D1600B1F-C307-457B-BC84-73339A64DF8D (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.4:*:*:*:*:*:*:* (string)

matchCriteriaId : CE2687A1-97EC-4777-9CC1-164D525C56E5 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:7.2.1.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 08C3C4C1-505B-4171-831B-7FD7EB34B45C (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : AB53E775-7A57-41D2-A93D-5F96D72622D1 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A17F44A3-8C09-49EE-8545-51C57F36B801 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 11DF0A4B-702E-4E6B-AD2D-086F76B6DBB2 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 80042980-E2BB-49F0-A3DB-BE22ECF820C9 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.0.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 217B6DC1-07E4-4A1E-8867-85C258778E5B (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:emc:isilon_onefs:8.1.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 847B0C10-6DCA-49FE-836C-F547B573A647 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode. (string)

}

1 : { »

lang : es (string)

value : En EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x y 7.1.1.x, un usuario con una cuenta de compliance admin (compadmin) puede explotar una vulnerabilidad en los scripts de mantenimiento isi_get_itrace o isi_get_profile para ejecutar cualquier script shell como root del sistema en un clúster en modo compliance. Esto podría conducir a una elevación de privilegios para el usuario compadmin y vulnerar el modo compliance. (string)

}

]

id : CVE-2017-14380 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.2 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:L/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-12-13T20:29:00.207 (string)

references : [ »

0 : { »

source : security_alert@emc.com (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://seclists.org/fulldisclosure/2017/Dec/41 (string)

}

1 : { »

source : security_alert@emc.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/102210 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://seclists.org/fulldisclosure/2017/Dec/41 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/102210 (string)

}

]

sourceIdentifier : security_alert@emc.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-269 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object