PT-2017-2405

CVE-2016-9870

·

Published

2017-01-23

·

Updated

2017-01-24

Description by

CVSS 2.0
7.2
High
MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions 7.1.0.x through 7.2.1.2 EMC Isilon OneFS version 8.0.0.0
Description The issue is caused by the failure to neutralize special elements in LDAP requests. This could allow a local attacker to gain unauthorized access to the system.
Recommendations For EMC Isilon OneFS versions 7.1.0.x through 7.2.1.2, consider restricting access to the LDAP functionality until a patch is available. For EMC Isilon OneFS version 8.0.0.0, consider restricting access to the LDAP functionality until a patch is available.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾