Privilege Escalation Vulnerability in Dell EMC Isilon OneFS

CVE-2018-1203 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

In Dell EMC Isilon OneFS, the compadmin is able to run tcpdump binary with root privileges. In versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, the tcpdump binary, being run with sudo, may potentially be used by compadmin to execute arbitrary code with root privileges.

Learn more about our Web Application Penetration Testing UK.