Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-rtslibUpgrade python-rtslib-doc | Jan 27, 2021 | Jun 19, 2020 |
| Centos_linux | — | Upgrade python-rtslib-docUpgrade python-rtslib | Dec 21, 2020 | Jun 19, 2020 |
| Debian | — | Upgrade python-rtslib-fb | Jul 30, 2024 | Jun 19, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-rtslib | Feb 22, 2021 | Jun 19, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-rtslib | Jan 20, 2021 | Jun 19, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-rtslib | Nov 2, 2020 | Jun 19, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-rtslibUpgrade python-rtslib | Feb 8, 2021 | Jun 19, 2020 |
| Oracle_linux | — | Upgrade python-rtslibUpgrade python-rtslib-doc | Dec 17, 2020 | Jun 19, 2020 |
| Redhat_linux | — | Upgrade python-rtslibNo solution existsUpgrade python-rtslib-doc | Dec 21, 2020 | Jun 19, 2020 |
| Suse | — | Upgrade python-rtslib-fb-commonUpgrade python2-rtslib-fbUpgrade python3-rtslib-fb | Aug 8, 2020 | Jun 19, 2020 |
| Ubuntu | — | Upgrade python-rtslib-fb | Nov 19, 2024 | Jun 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub