In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Isilon_onefs | Emc | 7.1.1.0 (including) | 7.1.1.0 (including) |
| Isilon_onefs | Emc | 7.1.1.1 (including) | 7.1.1.1 (including) |
| Isilon_onefs | Emc | 7.1.1.2 (including) | 7.1.1.2 (including) |
| Isilon_onefs | Emc | 7.1.1.3 (including) | 7.1.1.3 (including) |
| Isilon_onefs | Emc | 7.1.1.4 (including) | 7.1.1.4 (including) |
| Isilon_onefs | Emc | 7.1.1.5 (including) | 7.1.1.5 (including) |
| Isilon_onefs | Emc | 7.2.0.0 (including) | 7.2.0.0 (including) |
| Isilon_onefs | Emc | 7.2.0.1 (including) | 7.2.0.1 (including) |
| Isilon_onefs | Emc | 7.2.0.2 (including) | 7.2.0.2 (including) |
| Isilon_onefs | Emc | 7.2.0.3 (including) | 7.2.0.3 (including) |
| Isilon_onefs | Emc | 7.2.0.4 (including) | 7.2.0.4 (including) |
| Isilon_onefs | Emc | 7.2.0.5 (including) | 7.2.0.5 (including) |
| Isilon_onefs | Emc | 7.2.1.0 (including) | 7.2.1.0 (including) |
| Isilon_onefs | Emc | 7.2.1.1 (including) | 7.2.1.1 (including) |
| Isilon_onefs | Emc | 7.2.1.2 (including) | 7.2.1.2 (including) |
| Isilon_onefs | Emc | 7.2.1.3 (including) | 7.2.1.3 (including) |
| Isilon_onefs | Emc | 7.2.1.4 (including) | 7.2.1.4 (including) |
| Isilon_onefs | Emc | 7.2.1.5 (including) | 7.2.1.5 (including) |
| Isilon_onefs | Emc | 8.0.0.0 (including) | 8.0.0.0 (including) |
| Isilon_onefs | Emc | 8.0.0.1 (including) | 8.0.0.1 (including) |
| Isilon_onefs | Emc | 8.0.0.2 (including) | 8.0.0.2 (including) |
| Isilon_onefs | Emc | 8.0.0.3 (including) | 8.0.0.3 (including) |
| Isilon_onefs | Emc | 8.0.0.4 (including) | 8.0.0.4 (including) |
| Isilon_onefs | Emc | 8.0.1.0 (including) | 8.0.1.0 (including) |
| Isilon_onefs | Emc | 8.0.1.1 (including) | 8.0.1.1 (including) |
| Isilon_onefs | Emc | 8.1.0.0 (including) | 8.1.0.0 (including) |