NVD

Id
87291  
Name
CVE-2017-4985  
Description
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attacker to run arbitrary commands as root on the targeted VNX Control Station system.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2017-06-19  
Modified Date
2017-06-29  
Seq
2017-4985  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68753 JVNDB-2017-005010 EMC VNX2 および VNX1 における権限を root へ昇格される脆弱性 EMC VNX2 および VNX1 は、特定の perl スクリプト上で認証チェックが実行されないため、権限を root へ昇格される脆弱性が存在します。 CVE-2017-4985 0 CVE-2017-4985 87291 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-005010.html 2017-06-16 2017-07-12 View