SmartLock Root-Login Bypass Vulnerability in EMC Isilon OneFS

SmartLock Root-Login Bypass Vulnerability in EMC Isilon OneFS

CVE-2015-4545 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session.

Learn more about our Web Application Penetration Testing UK.