2 matches found
Updated python-rstlib packages fix security vulnerability
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resultin...
7.8CVSS3.7AI score0.00342EPSS
SaveExploits0References2
MGASA-2020-0336 Updated python-rstlib packages fix security vulnerability
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resultin...
7.8CVSS7.4AI score0.00342EPSS
SaveExploits0References3
20