CVE-2016-0908: Medium severity dell emc isilon onefs vulnerability
Published Jun 4, 2016
·Updated
EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges.
Affected Software
24 affected components
EMC Isilon OneFS=7.1.0.0
EMC Isilon OneFS=7.1.0.1
EMC Isilon OneFS=7.1.0.2
EMC Isilon OneFS=7.1.0.3
EMC Isilon OneFS=7.1.0.4
EMC Isilon OneFS=7.1.0.5
EMC Isilon OneFS=7.1.0.6
EMC Isilon OneFS=7.1.1.0
EMC Isilon OneFS=7.1.1.1
EMC Isilon OneFS=7.1.1.2
EMC Isilon OneFS=7.1.1.3
EMC Isilon OneFS=7.1.1.4
EMC Isilon OneFS=7.1.1.5
EMC Isilon OneFS=7.1.1.6
EMC Isilon OneFS=7.1.1.7
EMC Isilon OneFS=7.1.1.8
EMC Isilon OneFS=7.2.0.0
EMC Isilon OneFS=7.2.0.1
EMC Isilon OneFS=7.2.0.2
EMC Isilon OneFS=7.2.0.3
EMC Isilon OneFS=7.2.0.4
EMC Isilon OneFS=7.2.0.5
EMC Isilon OneFS=7.2.1.0
EMC Isilon OneFS=7.2.1.1
Event History
Jun 4, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0908?
CVE-2016-0908 has a high severity rating due to its potential to allow local users to gain root shell access.
2
How do I fix CVE-2016-0908?
To fix CVE-2016-0908, upgrade EMC Isilon OneFS to versions 7.1.1.9 or 7.2.1.2 or later.
3
Who is affected by CVE-2016-0908?
CVE-2016-0908 affects local users of EMC Isilon OneFS versions 7.1.x and 7.2.x prior to the specified patched versions.
4
What impact does CVE-2016-0908 have?
The impact of CVE-2016-0908 includes unauthorized access to system resources, potentially leading to data breaches.
5
When was CVE-2016-0908 disclosed?
CVE-2016-0908 was disclosed in June 2016 and is related to vulnerabilities identified in EMC Isilon OneFS.