CVE-2017-14380

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin (compadmin) account user could exploit a vulnerability in isi_get_itrace or isi_get_profile maintenance scripts to run any shell script as system root on a cluster in compliance mode. This could potentially lead to an elevation of privilege for the compadmin user and violate compliance mode.

• CWE-269

• http://seclists.org/fulldisclosure/2017/Dec/41Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102210Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Dec/41Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102210Third Party Advisory, VDB Entry

Published

Dec 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14375EMC Unisphere for VMAX Virtual Appliance (vApp) versions pri…
• CVE-2017-14376EMC AppSync Server prior to 3.5.0.1 contains database accoun…
• CVE-2017-14377EMC RSA Authentication Agent for Web: Apache Web Server vers…
• CVE-2017-14378EMC RSA Authentication Agent API 8.5 for C and RSA Authentic…
• CVE-2017-14379EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross…
• CVE-2017-1438IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.…
• CVE-2017-14381Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14382Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14383In Dell EMC VNX2 versions prior to Operating Environment for…
• CVE-2017-14384In Dell Storage Manager versions earlier than 16.3.20, the E…
• CVE-2017-14385An issue was discovered in EMC Data Domain DD OS 5.7 family,…
• CVE-2017-14386The web user interface of Dell 2335dn and 2355dn Multifuncti…