CVE-2018-1213
Last modified
CVE-2018-1213 is a vulnerability of currently unknown severity. Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.. EPSS estimates a 2.01% chance of exploitation in the next 30 days.
Description
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 and 8.1.0.2 is affected by a cross-site request forgery vulnerability. A malicious user may potentially exploit this vulnerability to send unauthorized requests to the server on behalf of authenticated users of the application.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Isilon Onefs | >= 7.2.1.0, <= 7.2.1.6 |
| Dell | Emc Isilon Onefs | >= 8.0.0.0, <= 8.0.0.6 |
| Dell | Emc Isilon Onefs | >= 8.0.1.0, <= 8.0.1.2 |
| Dell | Emc Isilon Onefs | >= 8.1.0.0, <= 8.1.0.1 |
| Dell | Emc Isilon Onefs | 7.1.1.11 |
| Dell | Emc Isilon Onefs | 8.1.0.2 |
References
- http://seclists.org/fulldisclosure/2018/Mar/50Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/103033Third Party Advisory, VDB Entry
- https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilitiesExploit, Third Party Advisory
- https://www.exploit-db.com/exploits/44039/Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2018/Mar/50Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/103033Third Party Advisory, VDB Entry
- https://www.coresecurity.com/advisories/dell-emc-isilon-onefs-multiple-vulnerabilitiesExploit, Third Party Advisory
- https://www.exploit-db.com/exploits/44039/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-1213?
How severe is CVE-2018-1213?
How do I fix CVE-2018-1213?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-12123Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14…4.3
- CVE-2018-12125Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12126Microarchitectural Store Buffer Data Sampling (MSBDS): Store…5.6
- CVE-2018-12127Microarchitectural Load Port Data Sampling (MLPDS): Load por…5.6
- CVE-2018-12128Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12129Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12130Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill b…5.9
- CVE-2018-12131Permissions in the driver pack installers for Intel NVMe bef…
- CVE-2018-12132Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12133Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12134Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-12135Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2018-1213?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
