Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-1184 State: PUBLISHED Published: 2018-02-03T01:00:00 Last Updated: 2024-08-05T03:51:48.881Z Vendors: n/a Products: EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, EMC RecoverPoint versions prior to 5.0.1.3 Problem Types: Command injection vulnerability Description: An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Boxmgmt CLI may allow a malicious user with boxmgmt privileges to bypass Boxmgmt CLI and run arbitrary commands with root privileges. Additional Analyst Notes: -
th boxmgmt privileges to bypass Boxmgmt CLI and run arbitrary commands with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040320 - http://seclists.org/fulldisclosure/2018/Feb/9
CVE ID: CVE-2018-1185 State: PUBLISHED Published: 2018-02-03T01:00:00 Last Updated: 2024-08-05T03:51:49.007Z Vendors: n/a Products: EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, EMC RecoverPoint versions prior to 5.0.1.3 Problem Types: Command injection vulnerability Description: An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Admin CLI may allow a malicious user with admin privileges to escape from the restricted shell to an interactive shell and run arbitrary commands with root privi
admin privileges to escape from the restricted shell to an interactive shell and run arbitrary commands with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1040320 - http://seclists.org/fulldisclosure/2018/Feb/9 - https://www.exploit-db.com/exploits/44614/
CVE ID: CVE-2018-1186 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-17T01:16:00.737Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-site scripting vulnerability Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Cluster description of the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
n in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1187 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-17T04:25:24.207Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-site scripting vulnerability Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6 is affected by a cross-site scripting vulnerability in the Network Configuration page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - htt
website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1188 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-16T23:16:24.173Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-site scripting vulnerability Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and versions 7.2.1.x is affected by a cross-site scripting vulnerability in the Authorization Providers page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfo
the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1189 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-16T20:12:06.865Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-site scripting vulnerability Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Antivirus Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1190 State: PUBLISHED Published: 2018-01-04T06:00:00 Last Updated: 2024-08-05T03:51:48.920Z Vendors: n/a Products: Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0 Problem Types: Cross-site Scripting Description: An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and all other versions prior to v45.0. A cross-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session
-site scripting (XSS) attack is possible in the clientId parameter of a request to the UAA OpenID Connect check session iframe endpoint used for single logout session management. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102427 - https://www.cloudfoundry.org/cve-2018-1190/
CVE ID: CVE-2018-1191 State: PUBLISHED Published: 2018-03-29T20:00:00Z Last Updated: 2024-09-17T04:10:09.194Z Vendors: Cloud Foundry Products: Garden-runC Problem Types: CWE-215 Description: Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. A user with access to Garden logs may be able to obtain leaked credentials and perform authenticated actions using those credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-1191/
CVE ID: CVE-2018-1192 State: PUBLISHED Published: 2018-02-01T20:00:00 Last Updated: 2024-08-05T03:51:49.039Z Vendors: n/a Products: Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3 Problem Types: UAA SessionID present in Audit Event Logs Description: In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions p
eployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x versions prior to 52.7, and 53.3.x versions prior to 53.3, the SessionID is logged in audit event logs. An attacker can use the SessionID to impersonate a logged-in user. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-1192/
CVE ID: CVE-2018-1193 State: PUBLISHED Published: 2018-05-23T15:00:00Z Last Updated: 2024-09-17T03:47:48.896Z Vendors: Cloud Foundry Products: Cloud Foundry Router Problem Types: User-provided value sanitization Description: Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded-Proto header in a request to potentially bypass an application requirement to only respond over secure connections. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-1193/
CVE ID: CVE-2018-1194 State: REJECTED Published: 2018-04-30T21:00:00 Last Updated: 2018-04-30T20:57:01 Description: No description available.
CVE ID: CVE-2018-1195 State: PUBLISHED Published: 2018-03-19T18:00:00Z Last Updated: 2024-09-16T20:52:50.610Z Vendors: Dell EMC Products: Cloud Controller Problem Types: API will accept a refresh token for authentication Description: In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller accepts refresh tokens for authentication where access tokens are expected. This exposes a vulnerability where a refresh token that would otherwise be insufficient to obtain an access token, either due to lack of client credentials or revocation, would allow authentication. Additional Analyst Notes: - CVE Program Container:
ack of client credentials or revocation, would allow authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-1195/
CVE ID: CVE-2018-1196 State: PUBLISHED Published: 2018-03-19T18:00:00Z Last Updated: 2024-09-16T17:27:35.008Z Vendors: Dell EMC Products: Spring Boot Problem Types: privilege escalation Description: Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "run_user" to overwrite and take ownership of any file on the same system. In order to instigate the attack, the application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot applicat
application must be installed as a service and the "run_user" requires shell access to the server. Spring Boot application that are not installed as a service, or are not using the embedded launch script are not susceptible. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-1196
CVE ID: CVE-2018-1197 State: PUBLISHED Published: 2018-03-19T18:00:00Z Last Updated: 2024-09-16T18:49:32.654Z Vendors: Dell EMC Products: Windows Stemcells Problem Types: GCP Metadata Endpoint Accessible from Application Containers on Windows Description: In Windows Stemcells versions prior to 1200.14, apps running inside containers in Windows on Google Cloud Platform are able to access the metadata endpoint. A malicious developer could use this access to gain privileged credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2018-1197/
CVE ID: CVE-2018-1198 State: PUBLISHED Published: 2018-09-17T16:00:00Z Last Updated: 2024-09-16T20:57:42.571Z Vendors: Pivotal Products: Cloud Cache Problem Types: Credential leak Description: Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using this password. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-1198
CVE ID: CVE-2018-1199 State: PUBLISHED Published: 2018-03-16T20:00:00Z Last Updated: 2024-09-16T16:13:09.643Z Vendors: Dell EMC Products: Spring by Pivotal Problem Types: Security bypass with static Description: Spring Security (Spring Security 4.1.x before 4.1.5, 4.2.x before 4.2.4, and 5.0.x before 5.0.1; and Spring Framework 4.3.x before 4.3.14 and 5.0.x before 5.0.3) does not consider URL path parameters when processing security constraints. By adding a URL path parameter with special encodings, an attacker may be able to bypass a security constraint. The root cause of this issue is a lack of clarity regarding the handling of path parameters in the Servlet Specification. Some Servlet con
this issue is a lack of clarity regarding the handling of path parameters in the Servlet Specification. Some Servlet containers include path parameters in the value returned for getPathInfo() and some do not. Spring Security uses the value returned by getPathInfo() as part of the process of mapping requests to security constraints. In this particular attack, different character encodings used in path parameters allows secured Spring MVC static resource URLs to be bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:2405 - https://lists.apache.org/thread.html/4ed49b103f64a0cecb38064f26cbf1389afc12124653da2d35166dbe%40%3Cissues.a
-2018:2405 - https://lists.apache.org/thread.html/4ed49b103f64a0cecb38064f26cbf1389afc12124653da2d35166dbe%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/ab825fcade0b49becfa30235b3d54f4a51bb74ea96b6c9adb5d1378c%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/dcf8599b80e43a6b60482607adb76c64672772dc2d9209ae2170f369%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpujul2020.html - https://pivotal.io/security/cve-2018-1199
CVE ID: CVE-2018-1200 State: PUBLISHED Published: 2018-03-16T20:00:00Z Last Updated: 2024-09-16T16:17:36.254Z Vendors: Dell EMC Products: Apps Manager for PCF Problem Types: File Access Vulnerability Description: Apps Manager for PCF (Pivotal Application Service 1.11.x before 1.11.26, 1.12.x before 1.12.14, and 2.0.x before 2.0.5) allows unprivileged remote file read in its container via specially-crafted links. Additional Analyst Notes: - CVE Program Container: References: - https://pivotal.io/security/cve-2018-1200 - http://www.securityfocus.com/bid/103042
CVE ID: CVE-2018-1201 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-17T03:24:01.982Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-site scripting vulnerability Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Job Operations Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.s
ssion in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1202 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-17T00:11:13.380Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-Site Scripting Vulnerability Description: Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or JavaScript code in the user's browser session in the context of the OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033
OneFS website. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1203 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-16T19:20:35.231Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Incorrect Authorization vulnerability Description: In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being run with sudo, may potentially be used by compadmin to execute arbitrary code with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com
http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1204 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-16T17:42:39.998Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Path Traversal vulnerability Description: Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool. A malicious compadmin may potentially exploit this vulnerability to execute arbitrary code with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://ww
ner: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/
CVE ID: CVE-2018-1205 State: PUBLISHED Published: 2018-03-27T21:00:00Z Last Updated: 2024-09-16T17:33:25.660Z Vendors: Dell EMC Products: ScaleIO Problem Types: Buffer overflow vulnerability Description: Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacker could potentially send specifically crafted packet data to the MDM service causing it to crash. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/59
CVE ID: CVE-2018-1206 State: PUBLISHED Published: 2018-03-12T17:00:00 Last Updated: 2024-08-05T03:51:49.014Z Vendors: n/a Products: Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 Problem Types: Hardcoded Password Vulnerability Description: Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where DPA Datastore Service is installed and knowledge of the password may potentia
cker with local access to the server where DPA Datastore Service is installed and knowledge of the password may potentially gain unauthorized access to the database. Note: The Datastore Service database cannot be accessed remotely using this account. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Mar/22 - http://www.securitytracker.com/id/1040484 - http://www.securityfocus.com/bid/103376
CVE ID: CVE-2018-1207 State: PUBLISHED Published: 2018-03-23T14:00:00 Last Updated: 2024-08-05T03:51:48.989Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code. Additional Analyst Notes: - CVE Program Container: References: - http://en.community.dell.com/techcenter/extras/m/white_papers/20485410 - https://twitter.com/nicowaisman/status/977279766792466432 - http://www.securityfocus.com/bid/103694
CVE ID: CVE-2018-1208 State: REJECTED Published: 2018-03-22T18:00:00 Last Updated: 2018-03-22T16:57:01 Description: No description available.
CVE ID: CVE-2018-1209 State: REJECTED Published: 2018-03-22T18:00:00 Last Updated: 2018-03-22T16:57:01 Description: No description available.
CVE ID: CVE-2018-1210 State: REJECTED Published: 2018-03-22T18:00:00 Last Updated: 2018-03-22T16:57:01 Description: No description available.
CVE ID: CVE-2018-1211 State: PUBLISHED Published: 2018-03-23T14:00:00Z Last Updated: 2024-09-16T20:22:05.961Z Vendors: Dell EMC Products: iDRAC7/iDRAC8 Problem Types: path traversal vulnerability Description: Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by querying specific URI strings. Additional Analyst Notes: - CVE Program Container: References: - http://en.community.dell.com/techcenter/extras/m/white_papers/20485410
CVE ID: CVE-2018-1212 State: PUBLISHED Published: 2018-07-02T17:00:00Z Last Updated: 2024-09-17T01:37:02.877Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell EMC Products: iDRAC6 (Monolithic), iDRAC6 (Modular) Problem Types: Authenticated remote code execution command injection vulnerability. Description: The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute arbitrary commands as root on the affected iDRAC system. Ad
sole could potentially exploit this vulnerability to execute arbitrary commands as root on the affected iDRAC system. Additional Analyst Notes: - CVE Program Container: References: - http://en.community.dell.com/techcenter/extras/m/white_papers/20487494
CVE ID: CVE-2018-1213 State: PUBLISHED Published: 2018-03-26T18:00:00Z Last Updated: 2024-09-16T22:52:02.700Z Vendors: Dell EMC Products: Isilon OneFS Problem Types: Cross-Site Request Forgery Vulnerability Description: Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http:/
ation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/103033 - http://seclists.org/fulldisclosure/2018/Mar/50 - https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities - https://www.exploit-db.com/exploits/44039/