CVE-2017-2765: Critical severity EMC Isilon InsightIQ vulnerability

Published Feb 8, 2017

Updated

EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerability that could potentially be exploited by attackers to compromise the affected system.

Affected Software

10 affected components

EMC Isilon InsightIQ=3.0.0

EMC Isilon InsightIQ=3.0.1

EMC Isilon InsightIQ=3.1.0

EMC Isilon InsightIQ=3.1.1

EMC Isilon InsightIQ=3.2.0

EMC Isilon InsightIQ=3.2.1

EMC Isilon InsightIQ=3.2.2

EMC Isilon InsightIQ=4.0.0

EMC Isilon InsightIQ=4.0.1

EMC Isilon InsightIQ=4.1.0

Event History

Feb 8, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Data Sourced

via NVD·05:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-2765?

CVE-2017-2765 is classified as a high severity vulnerability due to its potential for authentication bypass.

How do I fix CVE-2017-2765?

To mitigate CVE-2017-2765, upgrade EMC Isilon InsightIQ to a patched version that does not contain the vulnerability.

Which versions of EMC Isilon InsightIQ are affected by CVE-2017-2765?

CVE-2017-2765 affects EMC Isilon InsightIQ versions 3.0.0 to 4.1.0, including several specific versions.

Can CVE-2017-2765 be exploited remotely?

Yes, CVE-2017-2765 can potentially be exploited remotely by an attacker to gain unauthorized access.

What is the impact of CVE-2017-2765 if exploited?

The impact of exploiting CVE-2017-2765 could lead to unauthorized access and compromise of the affected EMC Isilon systems.