CVSS: 6.8EPSS: 0%CPEs: 24EXPL: 0CVE-2016-0908
https://notcve.org/view.php?id=CVE-2016-0908
EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges. EMC Isilon OneFS 7.1.x en versiones anteriores a 7.1.1.9 y 7.2.x en versiones anteriores a 7.2.1.2 permite a usuarios locales obtener acceso root al shell aprovechando privilegios administrativos. • http://seclists.org/bugtraq/2016/Jun/13 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.9EPSS: 0%CPEs: 23EXPL: 0CVE-2016-0907
https://notcve.org/view.php?id=CVE-2016-0907
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a similar issue to CVE-2016-2115. EMC Isilon OneFS 7.1.x y 7.2.x en versiones anteriores a 7.2.1.3 y 8.0.x en versiones anteriores a 8.0.0.1 e IsilonSD Edge OneFS 8.0.x en versiones anteriores a 8.0.0.1, no requiere la firma SMB dentro de una sesión DCERPC sobre ncacn_np, lo que permite a atacantes man-in-the-middle suplantar clientes SMB mediante la modificación del flujo de datos cliente-servidor, un problema similar a CVE-2016-2115. • http://seclists.org/bugtraq/2016/May/117 • CWE-254: 7PK - Security Features •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0900
https://notcve.org/view.php?id=CVE-2016-0900
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901. Vulnerabilidad de XSS en EMC RSA Authentication Manager en versiones anteriores a 8.1 SP1 P14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0901. • http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html http://seclists.org/bugtraq/2016/May/23 http://www.securitytracker.com/id/1035755 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0902
https://notcve.org/view.php?id=CVE-2016-0902
CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Vulnerabilidad de inyección CRLF en EMC RSA Authentication Manager en versiones anteriores a 8.1 SP1 P14 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de separación de respuesta HTTP a través de vectores no especificados. • http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html http://seclists.org/bugtraq/2016/May/23 http://www.securitytracker.com/id/1035755 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-0901
https://notcve.org/view.php?id=CVE-2016-0901
Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900. Vulnerabilidad de XSS en EMC RSA Authentication Manager en versiones anteriores a 8.1 SP1 P14 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2016-0900. • http://packetstormsecurity.com/files/136994/RSA-Authentication-Manager-XSS-HTTP-Response-Splitting.html http://seclists.org/bugtraq/2016/May/23 http://www.securitytracker.com/id/1035755 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •