CVE-2020-10699

🗓️ 02 Apr 2020 07:01:28Reported by redhat.comType

A flaw found in Linux enables local attacker to escalate privileges by modifying iSCSI configuration through world-writable targetclid socke

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus	20 Nov 202020:41	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0092: targetcli (ALINUX3-SA-2021:0092)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : targetcli (CESA-2020:1933)	1 Feb 202100:00	–	nessus
Tenable Nessus	GLSA-202008-22 : targetcli-fb: Multiple vulnerabilities	31 Aug 202000:00	–	nessus
Tenable Nessus	MiracleLinux 8 : targetcli-2.1.51-4.el8 (AXSA:2020-296:01)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 8 : targetcli (ELSA-2020-1933)	11 May 202000:00	–	nessus
Tenable Nessus	RHEL 8 : targetcli (RHSA-2020:1933)	29 Apr 202000:00	–	nessus
Tenable Nessus	Ubuntu 20.04 ESM : targetcli-fb vulnerabilities (USN-4871-1)	20 Oct 202300:00	–	nessus
AlpineLinux	CVE-2020-10699	15 Apr 202000:00	–	alpinelinux
BDU FSTEC	The vulnerability of the /var/run/targetclid.sock component of the targetclid daemon in Linux operating systems allows a hacker to increase their privileges.	29 May 202000:00	–	bdu_fstec

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-10699
github	www.github.com/open-iscsi/targetcli-fb/issues/162
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

19 Apr 2024 23:23Current

1.7Low risk

Vulners AI Score1.7

CVSS 27.2

CVSS 3.17.8

EPSS0.0014