CVE-2018-1213: CSRF
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1213?
CVE-2018-1213 is a cross-site request forgery vulnerability affecting Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2.
What is the severity of CVE-2018-1213?
The severity of CVE-2018-1213 is 8.8 (High).
How does CVE-2018-1213 affect Dell EMC Isilon OneFS?
CVE-2018-1213 affects Dell EMC Isilon OneFS by allowing a malicious user to send unauthorized requests via cross-site request forgery.
How can CVE-2018-1213 be exploited?
CVE-2018-1213 can be exploited by a malicious user who can potentially send unauthorized requests through the cross-site request forgery vulnerability.
Are there any references for CVE-2018-1213?
Yes, you can find references for CVE-2018-1213 at the following links: [1](http://seclists.org/fulldisclosure/2018/Mar/50), [2](http://www.securityfocus.com/bid/103033), [3](https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities).