targetcli: world writable /var/run/targetclid.sock allows unprivileged user to execute commands

A flaw was found in Linux, where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

[SECURITY] Fedora 19 Update: python-blivet-0.13-1.fc19

The python-blivet package is a python module for examining and modifying storage configuration...

Lenovo Hui shields 5. x password leak-vulnerability warning-the black bar safety net

Lenovo Hui shields Lenovo's hard drive protection system 5. x is the Beijing Sea of light the company cooperation to launch the product in the school room can often be seen. Due to product design flaws, allowing any user in the hard disk protection system to enable state read administrator...