CVE-2017-4979 - OpenCVE

EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity High

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

AV:N/AC:H/Au:S/C:P/I:P/A:P

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Emc	Isilon Onefs

Configuration 1 [-]

OR	cpe:2.3:o:emc:isilon_onefs:7.2.0.0:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.0.1:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.0.2:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.0:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.1:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.2:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.3:::::::*
	cpe:2.3:o:emc:isilon_onefs:8.0.0.0:::::::*
	cpe:2.3:o:emc:isilon_onefs:8.0.0.1:::::::*
	cpe:2.3:o:emc:isilon_onefs:8.0.0.2:::::::*
	cpe:2.3:o:emc:isilon_onefs:8.0.1.0:::::::*

No data.

References

Link	Providers
http://www.securityfocus.com/archive/1/540551/30/0/threaded

History

No history.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2017-05-19T15:00:00

Updated: 2024-08-05T14:47:44.041Z

Reserved: 2016-12-29T00:00:00

Link: CVE-2017-4979

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2017-05-19T15:29:00.257

Modified: 2019-10-03T00:03:26.223

Link: CVE-2017-4979

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, OneFS 7.2.0.x", "vendor": "n/a", "versions": [{"status": "affected", "version": "EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, OneFS 7.2.0.x"}]}], "datePublic": "2017-05-19T00:00:00", "descriptions": [{"lang": "en", "value": "EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports."}], "problemTypes": [{"descriptions": [{"description": "NFS Export Upgrade Vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-05-19T14:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.securityfocus.com/archive/1/540551/30/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2017-4979", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, OneFS 7.2.0.x", "version": {"version_data": [{"version_value": "EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, OneFS 7.2.0.x"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "NFS Export Upgrade Vulnerability"}]}]}, "references": {"reference_data": [{"name": "http://www.securityfocus.com/archive/1/540551/30/0/threaded", "refsource": "CONFIRM", "url": "http://www.securityfocus.com/archive/1/540551/30/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T14:47:44.041Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/540551/30/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2017-4979", "datePublished": "2017-05-19T15:00:00", "dateReserved": "2016-12-29T00:00:00", "dateUpdated": "2024-08-05T14:47:44.041Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "7F551F88-3176-4E92-AE7A-FCAB3A220A45", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "26144325-6722-48C1-A0C2-BB78EF9BDE60", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "10B1B998-AEEE-4123-82F3-72D84EF681DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0828B061-28B4-4AEE-BBB9-AF287B90713C", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "064C487D-517E-4F7B-A182-5DF287477652", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "D1600B1F-C307-457B-BC84-73339A64DF8D", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "AB53E775-7A57-41D2-A93D-5F96D72622D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A17F44A3-8C09-49EE-8545-51C57F36B801", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "DCE2CA2E-BFAD-4D87-BAAA-DA63C88F38D5", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:8.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "F2B3BD02-4CA9-4D00-A5B5-F3EBB7DACDEF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports."}, {"lang": "es", "value": "Isilon OneFS versi\u00f3n 8.0.1.0, OneFS versiones 8.0.0.0 - 8.0.0.2, OneFS versiones 7.2.1.0 - 7.2.1.3 y OneFS versiones 7.2.0.x de EMC, est\u00e1n afectadas por una vulnerabilidad de exportaci\u00f3n de NFS. Bajo ciertas condiciones, despu\u00e9s de actualizar un cl\u00faster desde OneFS versi\u00f3n 7.1.1.x o anteriores, los usuarios pueden tener niveles inesperados de acceso a algunas exportaciones de NFS."}], "id": "CVE-2017-4979", "lastModified": "2019-10-03T00:03:26.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-05-19T15:29:00.257", "references": [{"source": "security_alert@emc.com", "tags": ["Mitigation", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/archive/1/540551/30/0/threaded"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}