CVE-2017-14387

The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export settings (including the NFS export security flavor for authentication) that can be leveraged by current and future NFS exports. This NFS service contained a flaw that did not properly propagate changes made to the default security flavor to all new and existing NFS exports that are configured to use default NFS export settings and that are mounted after those changes are made. This flaw may potentially allow NFS clients to access affected NFS exports using the default and potentially weaker security flavor even if a more secure one was selected to be used by the OneFS administrator, aka an "NFS Export Security Setting Fallback Vulnerability."

• http://seclists.org/fulldisclosure/2017/Dec/78Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102292Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Dec/78Issue Tracking, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102292Third Party Advisory, VDB Entry

Published

Dec 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14381Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14382Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14383In Dell EMC VNX2 versions prior to Operating Environment for…
• CVE-2017-14384In Dell Storage Manager versions earlier than 16.3.20, the E…
• CVE-2017-14385An issue was discovered in EMC Data Domain DD OS 5.7 family,…
• CVE-2017-14386The web user interface of Dell 2335dn and 2355dn Multifuncti…
• CVE-2017-14388Cloud Foundry Foundation GrootFS release 0.3.x versions prio…
• CVE-2017-14389An issue was discovered in Cloud Foundry Foundation capi-rel…6.5
• CVE-2017-1439IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.…
• CVE-2017-14390In Cloud Foundry Foundation cf-deployment v0.35.0, a misconf…
• CVE-2017-14391Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-14392Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…