CVE-2015-4545

Published: Dec 21, 2015Modified: May 6, 2026

8.0

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session.

Affected (12)

Products: Emc: Isilon Onefs

Emc

1 product

Isilon Onefs

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Emc Isilon Onefs	Up to 7.1.1.7
Emc Isilon Onefs	Version 7.1.0.0
Emc Isilon Onefs	Version 7.1.0.1
Emc Isilon Onefs	Version 7.1.0.2
Emc Isilon Onefs	Version 7.1.0.3
Emc Isilon Onefs	Version 7.1.0.4
Emc Isilon Onefs	Version 7.1.0.5
Emc Isilon Onefs	Version 7.1.1.0
Emc Isilon Onefs	Version 7.1.1.1
Emc Isilon Onefs	Version 7.2.0.0
Emc Isilon Onefs	Version 7.2.0.2
Emc Isilon Onefs	Version 7.2.1.0

Related CWEs

CWE-264

References (4)

http://seclists.org/bugtraq/2015/Dec/103

Source: security_alert@emc.com

http://www.securityfocus.com/bid/79674

Source: security_alert@emc.com

http://seclists.org/bugtraq/2015/Dec/103

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/79674

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.