CVE-2017-4979: High severity dell emc isilon onefs vulnerability

Published May 19, 2017

Updated

EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability. Under certain conditions, after upgrading a cluster from OneFS 7.1.1.x or earlier, users may have unexpected levels of access to some NFS exports.

Affected Software

11 affected components

EMC Isilon OneFS=7.2.0.0

EMC Isilon OneFS=7.2.0.1

EMC Isilon OneFS=7.2.0.2

EMC Isilon OneFS=7.2.1.0

EMC Isilon OneFS=7.2.1.1

EMC Isilon OneFS=7.2.1.2

EMC Isilon OneFS=7.2.1.3

EMC Isilon OneFS=8.0.0.0

EMC Isilon OneFS=8.0.0.1

EMC Isilon OneFS=8.0.0.2

EMC Isilon OneFS=8.0.1.0

Event History

May 19, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-4979?

CVE-2017-4979 has a medium severity rating as it affects NFS export permissions, potentially allowing unauthorized access.

How do I fix CVE-2017-4979?

To fix CVE-2017-4979, ensure you upgrade to a secure version of EMC Isilon OneFS that is not susceptible to this vulnerability.

What versions of EMC Isilon OneFS are affected by CVE-2017-4979?

CVE-2017-4979 affects EMC Isilon OneFS versions 7.2.0.0 to 8.0.1.0.

How does CVE-2017-4979 impact NFS exports?

CVE-2017-4979 allows users to unexpectedly access NFS exports after upgrading from earlier versions of OneFS.

When was CVE-2017-4979 disclosed?

CVE-2017-4979 was disclosed in 2017, highlighting vulnerabilities in EMC Isilon OneFS.