CVE-2017-8001

An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials.

• CWE-532

• http://seclists.org/fulldisclosure/2017/Nov/35Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101997Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Nov/35Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/101997Third Party Advisory, VDB Entry

Published

Nov 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7994The function TextExtractor::ExtractText in TextExtractor.cpp…
• CVE-2017-7995Xen PV guest before Xen 4.3 checked access permissions to MM…
• CVE-2017-7997Multiple SQL injection vulnerabilities in Gespage before 7.4…
• CVE-2017-7998Multiple cross-site scripting (XSS) vulnerabilities in Gespa…
• CVE-2017-7999Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows…
• CVE-2017-8000In EMC RSA Authentication Manager 8.2 SP1 and earlier, a mal…
• CVE-2017-8002EMC Data Protection Advisor prior to 6.4 contains multiple b…
• CVE-2017-8003EMC Data Protection Advisor prior to 6.4 contains a path tra…
• CVE-2017-8004The EMC RSA Identity Governance and Lifecycle, RSA Via Lifec…
• CVE-2017-8005The EMC RSA Identity Governance and Lifecycle, RSA Via Lifec…
• CVE-2017-8006In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlie…
• CVE-2017-8007In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) f…8.8