« Volver al listado

CVE-2015-6848

Estado: ModificadaAlta (8.5)—

EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EMC — Isilon Onefs

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6848",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-11-27T02:59:00.077",
  "references": [
    {
      "url": "http://seclists.org/bugtraq/2015/Nov/121",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://seclists.org/bugtraq/2015/Nov/121",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Isilon OneFS 7.1.x before 7.1.1.5, 7.2.0.x before 7.2.0.3, and 7.2.1.x before 7.2.1.1, when the RFC 2307 feature is configured but SFU is not universally present, allows remote authenticated AD users to obtain root privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "EMC Isilon OneFS 7.1.x en versiones anteriores a 7.1.1.5, 7.2.0.x en versiones anteriores a 7.2.0.3 y 7.2.1.x en versiones anteriores a 7.2.1.1, cuando la funcionalidad RFC 2307 es configurada pero SFU no está presente universalmente, permite a usuarios AD remotos autenticados obtener privilegios root a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:31:31.383",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DBE16CA-46F6-4E5C-B361-67074B1771F1",
              "versionEndIncluding": "7.1.1.0"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A669BE6B-726F-4F34-A009-798E32FF6895"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AE74624-A44D-4837-AD36-DBF3E93D5ED9"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47CBA2E5-6E46-4922-B56B-3F8C578074B1"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.1.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90C22C93-9069-406E-9A14-03F20AD34D11"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E8AF3E1-FE57-40B9-95DD-4E4C8EB578CB"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F551F88-3176-4E92-AE7A-FCAB3A220A45"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26144325-6722-48C1-A0C2-BB78EF9BDE60"
            },
            {
              "criteria": "cpe:2.3:o:emc:isilon_onefs:7.2.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10B1B998-AEEE-4123-82F3-72D84EF681DC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}