CVE-2017-14380 Privilege escalation in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x

What is CVE-2017-14380?

CVE-2017-14380 is a medium-severity vulnerability in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x, published on 13 Dec 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode.

Weakness: CWE-269

Which versions are affected by CVE-2017-14380?

It affects 1 product.

Products include Emc Isilon Onefs.

How do I fix CVE-2017-14380?

No fix has been published for CVE-2017-14380 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-14380 being exploited?

There is no known exploitation of CVE-2017-14380 in the wild and no public exploit code.

Other vulnerabilities in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x

• CVE-2015-4525 Command injection in n/a Critical 9.0
• CVE-2015-6848 Privilege escalation in n/a High 8.5
• CVE-2015-4545 Auth bypass in n/a High 8.0
• CVE-2018-11071 DSA-2018-147: Dell EMC Isilon OneFS and IsilonSD Edge Remote Process Crash Vulnerability High 7.5
• CVE-2017-4980 Path traversal in EMC Isilon OneFS EMC Isilon OneFS 8.0.0 8.0.0.1, EMC Isilon OneFS 7.2.0 - 7.2.1.3, EMC Isilon OneFS 7.1.0 - 7.1.1.10 High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vq37-fmx5-vw56.