EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848)
EMC Isilon OneFS Privilege Escalation Vulnerability (CVE-2015-6848)
Release date:
Updated on:
Affected Systems:
EMC Isilon OneFS
Description:
CVE (CAN) ID: CVE-2015-6848
EMC Isilon OneFS Operating System is a smart file System integrating file systems, Volume managers, and data protection.
EMC Isilon OneFS has the permission Escalation Vulnerability in implementation. If RFC 2307 is enabled on the cluster and SFU is not configured on the trust domain, then, the active users in the trusted domain can access the EMC Isilon cluster with the root permission.
<* Source: EMC Product Security Response Center
*>
Suggestion:
Vendor patch:
EMC
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Https://support.emc.com/downloads/15209_Isilon-OneFS
This article permanently updates the link address: