Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-5318

Опубликовано: 06 фев. 2020
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are enabled, and Basic Authentication is enabled for either or both components, files are accessible without authentication.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dell:emc_isilon_onefs:8.0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:dell:emc_isilon_onefs:8.1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:dell:emc_isilon_onefs:8.1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:dell:emc_isilon_onefs:8.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 54%
0.00311
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-285
CWE-863

Связанные уязвимости

github
больше 3 лет назад

Dell EMC Isilon OneFS versions 8.1.2, 8.1.0.4, 8.1.0.3, and 8.0.0.7 contain a vulnerability in some configurations. An attacker may exploit this vulnerability to gain access to restricted files. The non-RAN HTTP and WebDAV file-serving components have a vulnerability wherein when either are enabled, and Basic Authentication is enabled for either or both components, files are accessible without authentication.

EPSS

Процентиль: 54%
0.00311
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-285
CWE-863