Lucene search
+L

2 matches found

Mageia
Mageia
added 2020/08/18 6:47 p.m.41 views

Updated python-rstlib packages fix security vulnerability

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resultin...

7.8CVSS3.7AI score0.00342EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/18 6:47 p.m.7 views

MGASA-2020-0336 Updated python-rstlib packages fix security vulnerability

Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resultin...

7.8CVSS7.4AI score0.00342EPSS
SaveExploits0References3
Rows per page
Query Builder