PT-2017-18074 · Emc · Emc Isilon Onefs

Published 2017-10-18 · Updated 2017-11-07 · CVE-2017-8024

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions prior to 8.1.0.1 EMC Isilon OneFS versions prior to 8.0.1.2 EMC Isilon OneFS versions prior to 8.0.0.6 EMC Isilon OneFS version 7.2.1.x

Description The issue is a reflected cross-site scripting vulnerability. It may be exploited by malicious users to compromise the affected system.

Recommendations For versions prior to 8.1.0.1, update to version 8.1.0.1 or later. For versions prior to 8.0.1.2, update to version 8.0.1.2 or later. For versions prior to 8.0.0.6, update to version 8.0.0.6 or later. For version 7.2.1.x, update to a version that is not affected by this issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-8024

Affected Products

Emc Isilon Onefs

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-8024 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8024 · Vendor Advisory
• http://seclists.org/fulldisclosure/2017/Oct/34 · Patch