The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x bef

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• emc isilon onefsup to 7.1.1.0 inclusive
• emc isilon onefs7.1.1.1
• emc isilon onefs7.1.1.2
• emc isilon onefs7.1.1.3
• emc isilon onefs7.1.1.4
• emc isilon onefs7.2.0.0
• emc isilon onefs7.2.0.1

Other highest-scoring records for the same primary product.

• CVE-2015-6848EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU i
  35Monitor
• CVE-2015-4545EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a S
  33Monitor
• CVE-2018-11071DSA-2018-147: Dell EMC Isilon OneFS and IsilonSD Edge Remote Process Crash Vulnerability
  31Monitor
• CVE-2017-4980EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected sys
  31Monitor
• CVE-2017-4988EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentially
  29Monitor
• CVE-2016-9871EMC Isilon OneFS 7.2.1.0 - 7.2.1.3, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, EMC Isilon OneFS 7.1.0.x is affected by a
  29Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.