CVE-2017-8024 - Vulnerability Details - OpenCVE

EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Emc	Isilon Onefs

Configuration 1 [-]

OR	cpe:2.3:o:emc:isilon_onefs:7.2.1.0:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.1:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.2:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.3:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.4:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.5:::::::*
	cpe:2.3:o:emc:isilon_onefs:7.2.1.6:::::::*

Configuration 2 [-]

cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*

Configuration 3 [-]

cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*

Configuration 4 [-]

cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://seclists.org/fulldisclosure/2017/Oct/34

History

No history.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2017-10-18T09:00:00

Updated: 2024-08-05T16:19:29.769Z

Reserved: 2017-04-21T00:00:00

Link: CVE-2017-8024

Vulnrichment

No data.

NVD

Status : Modified

Published: 2017-10-18T09:29:00.190

Modified: 2024-11-21T03:33:10.680

Link: CVE-2017-8024

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneFS versions prior to 8.0.0.6, EMC Isilon OneFS 7.2.1.x", "vendor": "n/a", "versions": [{"status": "affected", "version": "EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneFS versions prior to 8.0.0.6, EMC Isilon OneFS 7.2.1.x"}]}], "datePublic": "2017-10-17T00:00:00", "descriptions": [{"lang": "en", "value": "EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system."}], "problemTypes": [{"descriptions": [{"description": "Reflected Cross Site Scripting Vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-18T08:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://seclists.org/fulldisclosure/2017/Oct/34"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "ID": "CVE-2017-8024", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneFS versions prior to 8.0.0.6, EMC Isilon OneFS 7.2.1.x", "version": {"version_data": [{"version_value": "EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneFS versions prior to 8.0.0.6, EMC Isilon OneFS 7.2.1.x"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Reflected Cross Site Scripting Vulnerability"}]}]}, "references": {"reference_data": [{"name": "http://seclists.org/fulldisclosure/2017/Oct/34", "refsource": "CONFIRM", "url": "http://seclists.org/fulldisclosure/2017/Oct/34"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T16:19:29.769Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2017/Oct/34"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2017-8024", "datePublished": "2017-10-18T09:00:00", "dateReserved": "2017-04-21T00:00:00", "dateUpdated": "2024-08-05T16:19:29.769Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "10B1B998-AEEE-4123-82F3-72D84EF681DC", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0828B061-28B4-4AEE-BBB9-AF287B90713C", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "064C487D-517E-4F7B-A182-5DF287477652", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "D1600B1F-C307-457B-BC84-73339A64DF8D", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "CE2687A1-97EC-4777-9CC1-164D525C56E5", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "08C3C4C1-505B-4171-831B-7FD7EB34B45C", "vulnerable": true}, {"criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "EAE48C73-7CFE-454F-A4EF-0B12C49FD993", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*", "matchCriteriaId": "356662DF-BE65-4CFD-9BE3-353BAC206693", "versionEndIncluding": "8.1.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A91B9F8-9096-49BB-BC41-358595C12EAA", "versionEndIncluding": "8.0.0.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*", "matchCriteriaId": "133E612C-59F3-4B4A-AD3F-74D179176A8F", "versionEndIncluding": "8.0.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scripting vulnerability that may potentially be exploited by malicious users to compromise the affected system."}, {"lang": "es", "value": "EMC Isilon OneFS (versiones anteriores a la 8.1.0.1, 8.0.1.2 y 8.0.0.6 y en versiones 7.2.1.x) se ha visto afectado por una vulnerabilidad de Cross-Site Scripting reflejado que podr\u00eda ser explotada por usuarios maliciosos para comprometer el sistema afectado."}], "id": "CVE-2017-8024", "lastModified": "2024-11-21T03:33:10.680", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-10-18T09:29:00.190", "references": [{"source": "security_alert@emc.com", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2017/Oct/34"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2017/Oct/34"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}