In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode.
Weakness
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Isilon_onefs | Emc | 7.1.1.0 (including) | 7.1.1.0 (including) |
| Isilon_onefs | Emc | 7.1.1.1 (including) | 7.1.1.1 (including) |
| Isilon_onefs | Emc | 7.1.1.2 (including) | 7.1.1.2 (including) |
| Isilon_onefs | Emc | 7.1.1.3 (including) | 7.1.1.3 (including) |
| Isilon_onefs | Emc | 7.1.1.4 (including) | 7.1.1.4 (including) |
| Isilon_onefs | Emc | 7.1.1.5 (including) | 7.1.1.5 (including) |
| Isilon_onefs | Emc | 7.2.0.0 (including) | 7.2.0.0 (including) |
| Isilon_onefs | Emc | 7.2.0.1 (including) | 7.2.0.1 (including) |
| Isilon_onefs | Emc | 7.2.0.2 (including) | 7.2.0.2 (including) |
| Isilon_onefs | Emc | 7.2.0.3 (including) | 7.2.0.3 (including) |
| Isilon_onefs | Emc | 7.2.0.4 (including) | 7.2.0.4 (including) |
| Isilon_onefs | Emc | 7.2.0.5 (including) | 7.2.0.5 (including) |
| Isilon_onefs | Emc | 7.2.1.0 (including) | 7.2.1.0 (including) |
| Isilon_onefs | Emc | 7.2.1.1 (including) | 7.2.1.1 (including) |
| Isilon_onefs | Emc | 7.2.1.2 (including) | 7.2.1.2 (including) |
| Isilon_onefs | Emc | 7.2.1.3 (including) | 7.2.1.3 (including) |
| Isilon_onefs | Emc | 7.2.1.4 (including) | 7.2.1.4 (including) |
| Isilon_onefs | Emc | 7.2.1.5 (including) | 7.2.1.5 (including) |
| Isilon_onefs | Emc | 8.0.0.0 (including) | 8.0.0.0 (including) |
| Isilon_onefs | Emc | 8.0.0.1 (including) | 8.0.0.1 (including) |
| Isilon_onefs | Emc | 8.0.0.2 (including) | 8.0.0.2 (including) |
| Isilon_onefs | Emc | 8.0.0.3 (including) | 8.0.0.3 (including) |
| Isilon_onefs | Emc | 8.0.0.4 (including) | 8.0.0.4 (including) |
| Isilon_onefs | Emc | 8.0.1.0 (including) | 8.0.1.0 (including) |
| Isilon_onefs | Emc | 8.0.1.1 (including) | 8.0.1.1 (including) |
| Isilon_onefs | Emc | 8.1.0.0 (including) | 8.1.0.0 (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/122.html
- https://cwe.mitre.org/data/definitions/233.html
- https://cwe.mitre.org/data/definitions/58.html