CVE-2020-13867: Incorrect Default Permissions

Open-iSCSI targetcli-fb through 2.1.52 has weak permissions for /etc/target and for the backup directory and backup files...

PT-2020-6871

Name of the Vulnerable Software and Affected Versions Open-iSCSI targetcli-fb versions 2.1.52 and earlier Description The issue is related to weak permissions for the /etc/target directory, as well as the backup directory and backup files. This weakness can be exploited to gain access to...

Arbitrary Command Execution

targetcli is vulnerable to privilege escalation. World writable /var/run/targetclid.sock allows unprivileged user to execute arbitrary commands...

Oracle Linux 8 : targetcli (ELSA-2020-1933)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-1933 advisory. 2.1.51-4 - Increase the release version 2.1.51-3 - targetclid.sock allows unprivileged user to execute commands 2.1.51-2 - Create the target/pr directory when...

targetcli security update

2.1.51-4 - Increase the release version 2.1.51-3 - targetclid.sock allows unprivileged user to execute commands 2.1.51-2 - Create the target/pr directory when installing the package...

RHEL 8 : targetcli (RHSA-2020:1933)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:1933 advisory. The targetcli package contains an administration shell for configuring Internet Small Computer System Interface iSCSI, Fibre Channel over Ethernet...

Important: Red Hat Security Advisory: targetcli security update

An update for targetcli is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Linux targetcli-fb Access Control Error Vulnerability

Linux targetcli-fb is a command-line program for viewing, editing, and saving Linux kernel target subsystem LIO configurations. An access control error vulnerability exists in Linux targetcli-fb versions 2.1.50 and 2.1.51. A local attacker can use this vulnerability to modify the iSCSI...

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

Design/Logic Flaw

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

UBUNTU-CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2020-10699

CVE-2020-10699 affects targetcli-fb in Linux: versions 2.1.50 and 2.1.51 ship a world-writable /var/run/targetclid.sock, enabling a local attacker to modify iSCSI config and escalate to root. Connected advisories confirm exploitation is local and privilege escalation is possible via the targetcli...

PT-2020-2417

Name of the Vulnerable Software and Affected Versions Linux targetcli-fb versions 2.1.50 through 2.1.51 Description A flaw in the targetcli-fb component of Linux allows a local attacker to escalate their privileges to root due to inadequate access control. The issue is related to the world-writab...

CVE-2020-10699: Incorrect Permission Assignment for Critical Resource

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...

CVE-2020-10699

A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. If a system enables the targetclid socket, a local attacker can use this flaw to modify the iSCSI configuration and escalate their privileges to root...