CyberSec.Space Logo
返回 CVE 浏览器

CVE-2017-8001

HIGH
8.4
CVSS Severity Score
EPSS Score0.0950%
EPSS Percentile13.91th
Published2017年11月28日
Last Modified2026年5月13日

Vulnerability Description

An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials of the ScaleIO MDM user who executed the script in clear text in temporary log files. The temporary files may potentially be read by an unprivileged user with access to the server where the script was executed to recover exposed credentials.

Affected Platforms (CPE)

📦
Dell

Emc Scaleio

= 2.0.1.0
📦
Dell

Emc Scaleio

= 2.0.1.1
📦
Dell

Emc Scaleio

= 2.0.1.2
📦
Dell

Emc Scaleio

= 2.0.1.3

References & Advisories

🔗 http://seclists.org/fulldisclosure/2017/Nov/35
🔗 http://www.securityfocus.com/bid/101997
🔗 http://seclists.org/fulldisclosure/2017/Nov/35
🔗 http://www.securityfocus.com/bid/101997

相关漏洞威胁

CVE-2017-80209.8

An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote...

CVE-2018-12379.8

Dell EMC ScaleIO versions prior to 2.5, contain improper restriction of excessive authentication attempts on the Light installatio...

CVE-2016-98678.8

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel m...

CVE-2018-12057.5

Dell EMC ScaleIO, versions prior to 2.5, do not properly handle some packet data in the MDM service. As a result, a remote attacke...