Lucene search
+L

51 matches found

NVD
NVD
•added 2020/04/15 2:15 p.m.•21 views

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7.4AI score0.00335EPSS
SaveExploits0References3
Prion
Prion
•added 2020/04/15 2:15 p.m.•27 views

Design/Logic Flaw

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.2CVSS7.3AI score0.00335EPSS
SaveExploits0References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2020/04/15 2:15 p.m.•19 views

UBUNTU-CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7AI score0.00335EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/04/15 2:15 p.m.•46 views

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7AI score0.00335EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/04/15 12:00 a.m.•40 views

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7.4AI score0.00335EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/15 12:00 a.m.•146 views

CVE-2020-10699

CVE-2020-10699 affects targetcli-fb in Linux: versions 2.1.50 and 2.1.51 ship a world-writable /var/run/targetclid.sock, enabling a local attacker to modify iSCSI config and escalate to root. Connected advisories confirm exploitation is local and privilege escalation is possible via the targetcli...

7.8CVSS7.4AI score0.00335EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•10 views

CVE-2020-10699: Incorrect Permission Assignment for Critical Resource

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7.1AI score0.00335EPSS
SaveExploits0References3
Mend
Mend
•added 2020/04/15 12:00 a.m.•7 views

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

8.5CVSS0.00335EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•3 views

PT-2020-2417

Name of the Vulnerable Software and Affected Versions Linux targetcli-fb versions 2.1.50 through 2.1.51 Description A flaw in the targetcli-fb component of Linux allows a local attacker to escalate their privileges to root due to inadequate access control. The issue is related to the world-writab...

7.8CVSS5.7AI score0.00335EPSS
SaveExploits0References19
Debian CVE
Debian CVE
•added 2020/04/15 12:00 a.m.•35 views

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7.5AI score0.00335EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2020/04/15 12:00 a.m.•117 views

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

7.8CVSS7.5AI score0.00335EPSS
SaveExploits0
Rows per page
Query Builder