CVE-2015-4545

Severity: high (CVSS 8.0 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-12-21 · updated 2026-06-17
Weakness: CWE-264

Description

EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administrators to bypass a SmartLock root-login restriction by creating a root account and establishing a login session.

Affected products

EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneF: through 7.1.1.7; 7.1.0.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.1.0.4, 7.1.0.5 (+5)

References

http://seclists.org/bugtraq/2015/Dec/103
http://www.securityfocus.com/bid/79674
http://seclists.org/bugtraq/2015/Dec/103
http://www.securityfocus.com/bid/79674

Get alerted when CVE-2015-4545 or the next vulnerability affects your stack