← Back

CVE-2018-1213

nvd nist
Published: Mar 26, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.

Affected (6)

Dell
1 product
Emc Isilon Onefs
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Emc Isilon Onefs
From 7.2.1.0 to 7.2.1.6
Emc Isilon Onefs
From 8.0.0.0 to 8.0.0.6
Emc Isilon Onefs
From 8.0.1.0 to 8.0.1.2
Emc Isilon Onefs
From 8.1.0.0 to 8.1.0.1
Emc Isilon Onefs
Version 7.1.1.11
Emc Isilon Onefs
Version 8.1.0.2

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (8)

Source: security_alert@emc.com
Mailing ListThird Party Advisory
Source: security_alert@emc.com
Third Party AdvisoryVDB Entry
Source: security_alert@emc.com
ExploitThird Party Advisory
Source: security_alert@emc.com
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.