Lucene search

DellCVE-2017-2765

HistoryFeb 08, 2017 - 5:59 p.m.

CVE-2017-2765

2017-02-0817:59:00

CWE-287

dell

web.nvd.nist.gov

emc isilon

insightiq

authentication bypass

vulnerability

nvd

cve-2017-2765

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

71.2%

JSON

EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0 is affected by an authentication bypass vulnerability that could potentially be exploited by attackers to compromise the affected system.

Affected configurations

Nvd

Vulners

Node

emcisilon_insightiqMatch3.0.0

emcisilon_insightiqMatch3.0.1

emcisilon_insightiqMatch3.1.0

emcisilon_insightiqMatch3.1.1

emcisilon_insightiqMatch3.2.0

emcisilon_insightiqMatch3.2.1

emcisilon_insightiqMatch3.2.2

emcisilon_insightiqMatch4.0.0

emcisilon_insightiqMatch4.0.1

emcisilon_insightiqMatch4.1.0

VendorProductVersionCPE
emcisilon_insightiq3.0.0cpe:2.3:a:emc:isilon_insightiq:3.0.0:*:*:*:*:*:*:*
emcisilon_insightiq3.0.1cpe:2.3:a:emc:isilon_insightiq:3.0.1:*:*:*:*:*:*:*
emcisilon_insightiq3.1.0cpe:2.3:a:emc:isilon_insightiq:3.1.0:*:*:*:*:*:*:*
emcisilon_insightiq3.1.1cpe:2.3:a:emc:isilon_insightiq:3.1.1:*:*:*:*:*:*:*
emcisilon_insightiq3.2.0cpe:2.3:a:emc:isilon_insightiq:3.2.0:*:*:*:*:*:*:*
emcisilon_insightiq3.2.1cpe:2.3:a:emc:isilon_insightiq:3.2.1:*:*:*:*:*:*:*
emcisilon_insightiq3.2.2cpe:2.3:a:emc:isilon_insightiq:3.2.2:*:*:*:*:*:*:*
emcisilon_insightiq4.0.0cpe:2.3:a:emc:isilon_insightiq:4.0.0:*:*:*:*:*:*:*
emcisilon_insightiq4.0.1cpe:2.3:a:emc:isilon_insightiq:4.0.1:*:*:*:*:*:*:*
emcisilon_insightiq4.1.0cpe:2.3:a:emc:isilon_insightiq:4.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	isilon_insightiq	3.0.0	cpe:2.3:a:emc:isilon_insightiq:3.0.0:::::::*
emc	isilon_insightiq	3.0.1	cpe:2.3:a:emc:isilon_insightiq:3.0.1:::::::*
emc	isilon_insightiq	3.1.0	cpe:2.3:a:emc:isilon_insightiq:3.1.0:::::::*
emc	isilon_insightiq	3.1.1	cpe:2.3:a:emc:isilon_insightiq:3.1.1:::::::*
emc	isilon_insightiq	3.2.0	cpe:2.3:a:emc:isilon_insightiq:3.2.0:::::::*
emc	isilon_insightiq	3.2.1	cpe:2.3:a:emc:isilon_insightiq:3.2.1:::::::*
emc	isilon_insightiq	3.2.2	cpe:2.3:a:emc:isilon_insightiq:3.2.2:::::::*
emc	isilon_insightiq	4.0.0	cpe:2.3:a:emc:isilon_insightiq:4.0.0:::::::*
emc	isilon_insightiq	4.0.1	cpe:2.3:a:emc:isilon_insightiq:4.0.1:::::::*
emc	isilon_insightiq	4.1.0	cpe:2.3:a:emc:isilon_insightiq:4.1.0:::::::*

CNA Affected

[
  {
    "product": "EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EMC Isilon InsightIQ 4.1.0, 4.0.1, 4.0.0, 3.2.2, 3.2.1, 3.2.0, 3.1.1, 3.1.0, 3.0.1, 3.0.0"
      }
    ]
  }
]

References

www.securityfocus.com/archive/1/540100/30/0/threaded

www.securityfocus.com/bid/95945

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

71.2%

JSON

Related for CVE-2017-2765