CVE-2015-4525: Command Injection
The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4525?
CVE-2015-4525 is considered a critical vulnerability because it allows remote authenticated users to execute arbitrary commands with root privileges.
How do I fix CVE-2015-4525?
To fix CVE-2015-4525, upgrade EMC Isilon OneFS to versions 7.1.1.5 or later, or 7.2.0.2 or later.
Who is affected by CVE-2015-4525?
CVE-2015-4525 affects users of EMC Isilon OneFS versions 6.5.x.x through 7.1.1.4 and 7.2.0.0 through 7.2.0.1.
What kind of access does CVE-2015-4525 provide to attackers?
CVE-2015-4525 potentially provides attackers with root access to the system, allowing full control over the affected environment.
When was CVE-2015-4525 disclosed?
CVE-2015-4525 was disclosed in July 2015.