CVE-2015-4525

The log-gather implementation in the web administration interface in EMC Isilon OneFS 6.5.x.x through 7.1.1.x before 7.1.1.5 and 7.2.0.x before 7.2.0.2 allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
dellCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
emcisilon_onefs
𝑥
≤ 7.1.1.0
emcisilon_onefs
7.1.1.1
emcisilon_onefs
7.1.1.2
emcisilon_onefs
7.1.1.3
emcisilon_onefs
7.1.1.4
emcisilon_onefs
7.2.0.0
emcisilon_onefs
7.2.0.1
𝑥
= Vulnerable software versions