CVE-2016-9870: Medium severity EMC Isilon OneFS vulnerability

Published Jan 23, 2017

Updated

EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentially be exploited by a malicious user to compromise the system.

Affected Software

26 affected components

EMC Isilon OneFS=7.1.0.0

EMC Isilon OneFS=7.1.0.1

EMC Isilon OneFS=7.1.0.2

EMC Isilon OneFS=7.1.0.3

EMC Isilon OneFS=7.1.0.4

EMC Isilon OneFS=7.1.0.5

EMC Isilon OneFS=7.1.0.6

EMC Isilon OneFS=7.1.1.0

EMC Isilon OneFS=7.1.1.1

EMC Isilon OneFS=7.1.1.2

EMC Isilon OneFS=7.1.1.3

EMC Isilon OneFS=7.1.1.4

EMC Isilon OneFS=7.1.1.5

EMC Isilon OneFS=7.1.1.6

EMC Isilon OneFS=7.1.1.7

EMC Isilon OneFS=7.1.1.8

EMC Isilon OneFS=7.2.0.0

EMC Isilon OneFS=7.2.0.1

EMC Isilon OneFS=7.2.0.2

EMC Isilon OneFS=7.2.0.3

EMC Isilon OneFS=7.2.0.4

EMC Isilon OneFS=7.2.0.5

EMC Isilon OneFS=7.2.1.0

EMC Isilon OneFS=7.2.1.1

EMC Isilon OneFS=7.2.1.2

EMC Isilon OneFS=8.0.0.0

Event History

Jan 23, 2017

CVE Published

via MITRE·06:49 AM

Data Sourced

via MITRE·06:49 AM

DescriptionWeakness

Data Sourced

via NVD·07:59 AM

DescriptionSeverityWeaknessAffected Software

Dec 12, 58332

Event

11:28 AM

Frequently Asked Questions

What is the severity of CVE-2016-9870?

CVE-2016-9870 is classified as a high severity vulnerability due to its potential to allow unauthorized access and system compromise.

How do I fix CVE-2016-9870?

To fix CVE-2016-9870, apply the latest patches provided by EMC for Isilon OneFS versions affected by this vulnerability.

Which versions of EMC Isilon OneFS are vulnerable to CVE-2016-9870?

EMC Isilon OneFS versions ranging from 7.1.0.0 to 8.0.0.0 are affected by CVE-2016-9870.

What type of vulnerability is CVE-2016-9870?

CVE-2016-9870 is an LDAP injection vulnerability that can be exploited by attackers.

Who is affected by CVE-2016-9870?

Organizations using the vulnerable versions of EMC Isilon OneFS are at risk from CVE-2016-9870.